SUSE-SU-2017:1738-1: bind&distro=SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2017:1738-1 is a vulnerability in bind&distro=SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 29-06-2017
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for bind This update for bind fixes the following issues: - An attacker with the ability to send and receive messages to an authoritative DNS server was able to circumvent TSIG authentication of AXFR requests. A server that relied solely on TSIG keys for protection could be manipulated into (1) providing an AXFR of a zone to an unauthorized recipient and (2) accepting bogus Notify packets. [bsc#1046554, CVE-2017-3142] - An attacker who with the ability to send and receive messages to an authoritative DNS server and who had knowledge of a valid TSIG key name for the zone and service being targeted was able to manipulate BIND into accepting an unauthorized dynamic update. [bsc#1046555, CVE-2017-3143]

No weakness data has been published for this record.