Published: 08/07/2017 Updated: 20/01/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2

VMScore: 384

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Knot DNS prior to 2.4.5 and 2.5.x prior to 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set, because of an improper TSIG validity period check.

Vulnerable Product	Search on Vulmon	Subscribe to Product
knot-dns knot dns 2.5.0
knot-dns knot dns
knot-dns knot dns 2.5.1
debian debian linux 8.0
debian debian linux 9.0
debian debian linux 10.0

Debian Bug report logs - #865678 knot: CVE-2017-11104: Improper TSIG validity period check can allow TSIG forgery Package: src:knot; Maintainer for src:knot is knot packagers <knot@packagesdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 23 Jun 2017 17:03:01 UTC Severity: grave Tags: pat ...

Exploit for TSIG bypass vulnerabilities in Bind (CVE-2017-3143) and Knot DNS (CVE-2017-11104)

TSIG Bypass exploit Exploit for CVE-2017-3143 in Bind and CVE-2017-11104 in Knot DNS See wwwsynacktivcom/ressources/CVE-2017-3143_BIND9_TSIG_dynamic_updates_vulnerability_Synacktivpdf for more info Author Clément Berthaux - clement (dot) berthaux (at) synacktiv (dot) com

A curated list of my GitHub stars!

Awesome Stars A curated list of my GitHub stars! Generated by starred Contents ASL Assembly AutoHotkey Batchfile C C# C++ CMake CSS Clojure CoffeeScript Dockerfile F# Go Groovy HTML Haskell Java JavaScript Jupyter Notebook Kotlin Logos Lua Makefile Objective-C Objective-C++ Others PHP Pascal Perl PowerShell Prolog Python Rascal Roff Ruby Rust Scala Shell Swift TSQL TeX Typ

CWE-20 https://lists.nic.cz/pipermail/knot-dns-users/2017-June/001144.html https://bugs.debian.org/865678 http://www.synacktiv.ninja/ressources/Knot_DNS_TSIG_Signature_Forgery.pdf http://www.securityfocus.com/bid/99598 http://www.debian.org/security/2017/dsa-3910 http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00078.html http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00076.html http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00089.html http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00049.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865678 https://nvd.nist.gov https://github.com/saaph/CVE-2017-3143

CVE-2017-11104

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect