Debian/bind9: low 3.7
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a
Action: Upgrade bind9 to 1:9.10.3.dfsg.P4-12.4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:9.10.3.dfsg.P4-12.4 | - |
Fixed versions
| 1:9.10.3.dfsg.P4-12.4 |
Sources
published · modified · JSON