PT-2017-11743 · Cz.Nic+1 · Knot Dns+1

CVE-2017-11104

·

Publicado

2017-07-08

·

Atualizado

2023-01-20

CVSS v3.1

5.9

Média

VetorAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Knot DNS versions prior to 2.4.5 Knot DNS versions 2.5.x prior to 2.5.2
Description The issue is related to a flaw in the TSIG protocol implementation. This flaw allows an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set. The bypass is possible due to an improper TSIG validity period check.
Recommendations For Knot DNS versions prior to 2.4.5, update to version 2.4.5 or later. For Knot DNS versions 2.5.x prior to 2.5.2, update to version 2.5.2 or later.

Exploit

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-11104
DSA-3910-1
OPENSUSE-SU-2018_1395-1
OPENSUSE-SU-2020:1085-1
OPENSUSE-SU-2020:1086-1
OPENSUSE-SU-2020:1112-1
OPENSUSE-SU-2020:1232-1
OPENSUSE-SU-2020_1085-1
OPENSUSE-SU-2020_1086-1

Produtos afetados

Knot Dns
Suse