Alpine/bind: low 3.7
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a
Action: Upgrade bind to 9.10.4_p8-r1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.4.0 | 9.10.4_p8-r1 | - |
Fixed versions
| 9.10.4_p8-r1 |
Sources
published · modified · JSON