---

CVE-2017-3143 - log back

CVE-2017-3143 created at 25 Sep 2019 19:31:40
Severity	+ High
Remote	+ Remote
Type	+ Access restriction bypass
Description	+ An error in TSIG authentication has been found in Bind <= 9.11.1-P1, allowing a remote attacker to bypass authentication in order to perform unauthorized zone updates, altering the content of the zone. The attacker needs to have knowledge of the key name, and should be allowed by the other ACL restrictions if any.
References	+ https://kb.isc.org/article/AA-01503/74/CVE-2017-3143%3A-An-error-in-TSIG-authentication-can-permit-unauthorized-dynamic-updates.html
Notes