Skip to content
OpenAdvisories
High DLA-1025-1 2 CVEs

bind9 - security update

Published Jul 13, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 bind9 1:9.8.4.dfsg.P1-6+nmu2+deb7u17

Vulnerabilities 2

  • High 7.5
    CVE-2017-3143 Public exploit EPSS 18%

    An error in TSIG authentication can permit unauthorized dynamic updates

    An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BI…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2017-3142

    An error in TSIG authentication can permit unauthorized zone transfers

    An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies …

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine