CVE-2017-11104

Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set, because of an improper TSIG validity period check.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:knot-dns:knot_dns:2.5.0:*:*:*:*:*:*:*
cpe:2.3:a:knot-dns:knot_dns:*:*:*:*:*:*:*:*
cpe:2.3:a:knot-dns:knot_dns:2.5.1:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Information

Published : 2017-07-08 03:29

Updated : 2023-01-20 07:23


NVD link : CVE-2017-11104

Mitre link : CVE-2017-11104


JSON object : View

CWE
CWE-20

Improper Input Validation

Advertisement

dedicated server usa

Products Affected

debian

  • debian_linux

knot-dns

  • knot_dns