Описание
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | released | 1:9.10.3.dfsg.P4-10.1ubuntu7 |
| devel | released | 1:9.10.3.dfsg.P4-10.1ubuntu7 |
| esm-infra-legacy/trusty | released | 1:9.9.5.dfsg-3ubuntu0.15 |
| esm-infra/xenial | released | 1:9.10.3.dfsg.P4-8ubuntu1.7 |
| precise/esm | not-affected | 1:9.8.1.dfsg.P1-4ubuntu0.23 |
| trusty | released | 1:9.9.5.dfsg-3ubuntu0.15 |
| trusty/esm | released | 1:9.9.5.dfsg-3ubuntu0.15 |
| upstream | needs-triage | |
| vivid/ubuntu-core | ignored | end of life |
| xenial | released | 1:9.10.3.dfsg.P4-8ubuntu1.7 |
Показывать по
EPSS
4.3 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2.
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2.
An attacker who is able to send and receive messages to an authoritati ...
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2.
Уязвимость реализации протокола TSIG DNS-сервера BIND, позволяющая нарушителю обойти процедуру аутентификации и получить корректную подпись для произвольных данных
EPSS
4.3 Medium
CVSS2
7.5 High
CVSS3