Описание
Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set, because of an improper TSIG validity period check.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 2.6.5-3 |
| cosmic | not-affected | 2.6.5-3 |
| devel | not-affected | 2.6.5-3 |
| disco | not-affected | 2.6.5-3 |
| eoan | not-affected | 2.6.5-3 |
| esm-apps/bionic | not-affected | 2.6.5-3 |
| esm-apps/focal | not-affected | 2.6.5-3 |
| esm-apps/jammy | not-affected | 2.6.5-3 |
| esm-apps/noble | not-affected | 2.6.5-3 |
Показывать по
EPSS
4.3 Medium
CVSS2
5.9 Medium
CVSS3
Связанные уязвимости
Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set, because of an improper TSIG validity period check.
Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within th ...
EPSS
4.3 Medium
CVSS2
5.9 Medium
CVSS3