https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:57:17 +0000 https://cve.radiocsirt.org/vuln/certfr-2017-avi-231 certfr-2017-avi-231 https://cve.radiocsirt.org/vuln/certfr-2017-avi-231 https://cve.radiocsirt.org/vuln/cnvd-2017-21504 cnvd-2017-21504 https://cve.radiocsirt.org/vuln/cnvd-2017-21504 https://cve.radiocsirt.org/vuln/euvd-2026-165370 EUVD-2026-165370 https://cve.radiocsirt.org/vuln/euvd-2026-165370 https://cve.radiocsirt.org/vuln/fkie_cve-2017-3142 <p>An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into: providing an AXFR of a zone to an unauthorized recipient or accepting bogus NOTIFY packets. Affects BIND 9.4.0-&gt;9.8.8, 9.9.0-&gt;9.9.10-P1, 9.10.0-&gt;9.10.5-P1, 9.11.0-&gt;9.11.1-P1, 9.9.3-S1-&gt;9.9.10-S2, 9.10.5-S1-&gt;9.10.5-S2.</p> <p>An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into: providing an AXFR of a zone to an unauthorized recipient or accepting bogus NOTIFY packets. Affects BIND 9.4.0-&gt;9.8.8, 9.9.0-&gt;9.9.10-P1, 9.10.0-&gt;9.10.5-P1, 9.11.0-&gt;9.11.1-P1, 9.9.3-S1-&gt;9.9.10-S2, 9.10.5-S1-&gt;9.10.5-S2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-3142 https://cve.radiocsirt.org/vuln/ghsa-jhf7-373h-xx92 <p>An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into: providing an AXFR of a zone to an unauthorized recipient or accepting bogus NOTIFY packets. Affects BIND 9.4.0-&gt;9.8.8, 9.9.0-&gt;9.9.10-P1, 9.10.0-&gt;9.10.5-P1, 9.11.0-&gt;9.11.1-P1, 9.9.3-S1-&gt;9.9.10-S2, 9.10.5-S1-&gt;9.10.5-S2.</p> <p>An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into: providing an AXFR of a zone to an unauthorized recipient or accepting bogus NOTIFY packets. Affects BIND 9.4.0-&gt;9.8.8, 9.9.0-&gt;9.9.10-P1, 9.10.0-&gt;9.10.5-P1, 9.11.0-&gt;9.11.1-P1, 9.9.3-S1-&gt;9.9.10-S2, 9.10.5-S1-&gt;9.10.5-S2.</p> https://cve.radiocsirt.org/vuln/ghsa-jhf7-373h-xx92 https://cve.radiocsirt.org/vuln/gsd-2017-3142 gsd-2017-3142 https://cve.radiocsirt.org/vuln/gsd-2017-3142 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10650-1 <p>bind-9.16.20-1.4 on GA media</p> <p>bind-9.16.20-1.4 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10650-1 https://cve.radiocsirt.org/vuln/rhsa-2017:1679 <p>bind: An error in TSIG authentication can permit unauthorized zone transfers bind: An error in TSIG authentication can permit unauthorized dynamic updates</p> <p>bind: An error in TSIG authentication can permit unauthorized zone transfers bind: An error in TSIG authentication can permit unauthorized dynamic updates</p> https://cve.radiocsirt.org/vuln/rhsa-2017:1679 https://cve.radiocsirt.org/vuln/suse-su-2017:1736-1 <p>Security update for bind</p> <p>Security update for bind</p> https://cve.radiocsirt.org/vuln/suse-su-2017:1736-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-3142 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: bind9, Ubuntu:16.04:LTS: bind9</p> <p>An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into: providing an AXFR of a zone to an unauthorized recipient or accepting bogus NOTIFY packets. Affects BIND 9.4.0-&gt;9.8.8, 9.9.0-&gt;9.9.10-P1, 9.10.0-&gt;9.10.5-P1, 9.11.0-&gt;9.11.1-P1, 9.9.3-S1-&gt;9.9.10-S2, 9.10.5-S1-&gt;9.10.5-S2.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: bind9, Ubuntu:16.04:LTS: bind9</p> <p>An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into: providing an AXFR of a zone to an unauthorized recipient or accepting bogus NOTIFY packets. Affects BIND 9.4.0-&gt;9.8.8, 9.9.0-&gt;9.9.10-P1, 9.10.0-&gt;9.10.5-P1, 9.11.0-&gt;9.11.1-P1, 9.9.3-S1-&gt;9.9.10-S2, 9.10.5-S1-&gt;9.10.5-S2.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-3142 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1191 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um Sicherheitsvorkehrungen zu umgehen bzw. vertrauliche Informationen offenzulegen oder Daten zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um Sicherheitsvorkehrungen zu umgehen bzw. vertrauliche Informationen offenzulegen oder Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1191