NetSight
IP …
high7.5

CVE-2017-3143

An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service bei…

Impact

An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2.

Affected products

VendorProductAffected versions
IscBind
from 9.4.0 through 9.8.8
from 9.9.0 through 9.9.10
from 9.10.0 through 9.10.5
from 9.11.0 through 9.11.1
Versions 9.9.0, 9.9.3
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 7.3, 7.4, 7.6
RedhatEnterprise Linux Server Eus
Versions 7.3, 7.4, 7.5, 7.6
RedhatEnterprise Linux Server Tus
Versions 7.3, 7.6
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
DebianDebian Linux
Versions 8.0, 9.0

References