Internet Systems Consortium BIND: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2017-3143 Public exploit EPSS 18%

  An error in TSIG authentication can permit unauthorized dynamic updates

  An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BI…

  ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine
  Jan 16, 2019
• Medium 5.3
  CVE-2017-3142

  An error in TSIG authentication can permit unauthorized zone transfers

  An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies …

  ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine
  Jan 16, 2019

Revision history

1. 2025-05-29 #18

   Neue Updates von Dell aufgenommen

2. 2022-02-03 #17

   Neue Updates von Oracle Linux aufgenommen

3. 2019-09-01 #16

   Neue Updates von NetApp aufgenommen

4. 2017-09-18 #15

   New remediations available

5. 2017-09-05 #12

   Version nicht vorhanden

6. 2017-09-05 #13

   New remediations available

7. 2017-09-05 #14

   Version nicht vorhanden

8. 2017-07-23 #11

   Added references

9. 2017-07-16 #8

   New remediations available

10. 2017-07-16 #9

    New remediations available

11. 2017-07-16 #10

    New remediations available

12. 2017-07-09 #7

    New remediations available

13. 2017-07-05 #5

    New remediations available

14. 2017-07-05 #6

    New remediations available

15. 2017-07-03 #4

    Added references

16. 2017-07-02 #3

    New remediations available

17. 2017-06-29 #1

    Initial Release

18. 2017-06-29 #2

    Version nicht vorhanden

References

• ISC BIND9 Security Advisory AA-01503 vom 2017-06-29
  https://kb.isc.org/article/AA-01503
• ISC BIND9 Security Advisory AA-01504 vom 2017-06-29
  https://kb.isc.org/article/AA-01504
• SUSE Security Update Announcement ID SUSE-SU-2017:1736-1 vom 2017-06-29
  https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00044.html
• SUSE Security Update Announcement ID SUSE-SU-2017:1737-1 vom 2017-06-29
  https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00045.html
• SUSE Security Update Announcement ID SUSE-SU-2017:1738-1 vom 2017-06-29
  https://lists.opensuse.org/opensuse-security-announce/2017-06/msg00046.html
• F5 Security Advisory K59448931 vom 2017-06-30
  https://support.f5.com/csp/article/K59448931
• F5 Security Advisory K02230327 vom 2017-06-30
  https://support.f5.com/csp/article/K02230327
• Red Hat Security Advisory RHSA-2017:1679 vom 2017-07-05
  https://access.redhat.com/errata/RHSA-2017:1679
• Red Hat Security Advisory RHSA-2017:1680 vom 2017-07-05
  https://access.redhat.com/errata/RHSA-2017:1680
• Oracle Linux Security Advisory ELSA-2017-1679 vom 2017-07-05
  http://linux.oracle.com/errata/ELSA-2017-1679.html
• Oracle Linux Security Advisory ELSA-2017-1680 vom 2017-07-05
  http://linux.oracle.com/errata/ELSA-2017-1680.html
• CentOS Security Advisory CESA-2017:1680 vom 2017-07-05
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2017-1680-Important-CentOS-7-bind-Security-Update-tp4644701.html
• CentOS Security Advisory CESA-2017:1679 vom 2017-07-05
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2017-1679-Important-CentOS-6-bind-Security-Update-tp4644700.html
• Debian Security Advisory DSA-3904 vom 2017-07-09
  https://www.debian.org/security/2017/dsa-3904
• ISC Knowledge Base "BIND 9.9.11rc1 Release Notes"
  https://kb.isc.org/article/AA-01514/81/BIND-9.9.11rc1-Release-Notes.html
• ISC Knowledge Base "BIND 9.10.6rc1 Release Notes"
  https://kb.isc.org/article/AA-01513/81/BIND-9.10.6rc1-Release-Notes.html
• ISC Knowledge Base "BIND 9.11.2rc1 Release Notes"
  https://kb.isc.org/article/AA-01512/81/BIND-9.11.2rc1-Release-Notes.html
• HP SECURITY BULLETIN HPESBUX03772 rev.1 vom 2017-09-06
  http://h20565.www2.hpe.com/hpsc/doc/public/display?docId=hpesbux03772en_us
• IBM SECURITY ADVISORY
  http://aix.software.ibm.com/aix/efixes/security/bind_advisory16.asc
• Ubuntu Security Notice USN-3346-2 vom 2017-09-18
  http://www.ubuntu.com/usn/usn-3346-2/
• NetApp Security Advisory NTAP-20190830-0003 vom 2019-08-30
  https://security.netapp.com/advisory/ntap-20190830-0003/
• Oracle Linux Security Advisory ELSA-2022-9117 vom 2022-02-03
  https://linux.oracle.com/errata/ELSA-2022-9117.html
• Dell Security Advisory DSA-2025-213 vom 2025-05-30
  https://www.dell.com/support/kbdoc/de-de/000326299/dsa-2025-213-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-multiple-third-party-vulnerabilities