DEBIAN-CVE-2017-3143

DEBIAN-CVE-2017-3143 PUBLISHED CVSS 5.900000095367432 MEDIUM

An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2.

Risk Scores

CVSS v3.0

5.900000095367432

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Products

Vendor	Product	Versions
Debian:14	bind9	0, 0, 0
Debian:12	bind9	0, 0, 0
Debian:11	bind9	0, 0, 0
Debian:13	bind9	0, 0, 0

Exploit Intelligence

Exploit for TSIG bypass vulnerabilities in Bind (CVE-2017-3143) and Knot DNS (CVE-2017-11104) (github-poc-repo)

Timeline

Jan 16, 2019 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2017-3143 advisory

Open in Interactive Console →