Skip to content
OpenAdvisories
High DSA-3904-1 2 CVEs

bind9 - security update

Published Jul 8, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 8 bind9 1:9.9.5.dfsg-9+deb8u12
Debian · 9 bind9 1:9.10.3.dfsg.P4-12.3+deb9u1

Vulnerabilities 2

  • High 7.5
    CVE-2017-3143 Public exploit EPSS 18%

    An error in TSIG authentication can permit unauthorized dynamic updates

    An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BI…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2017-3142

    An error in TSIG authentication can permit unauthorized zone transfers

    An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies …

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine