Описание
Security update for knot
This update for knot fixes the following issues:
- CVE-2017-11104: Fixed an improper implementation of TSIG protocol which could have allowed an attacker with a valid key name and algorithm to bypass TSIG authentication (boo#1047841).
Список пакетов
openSUSE Leap 15.1
knot-1.6.8-lp151.4.3.1
Ссылки
- E-Mail link for openSUSE-SU-2020:1085-1
- SUSE Security Ratings
- SUSE Bug 1047841
- SUSE CVE CVE-2017-11104 page
Описание
Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set, because of an improper TSIG validity period check.
Затронутые продукты
openSUSE Leap 15.1:knot-1.6.8-lp151.4.3.1
Ссылки
- CVE-2017-11104
- SUSE Bug 1047841