Low
Security advisory
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into: providing an AXFR of a zone to an unauthorized recipient or accepting bogus NOTIFY packets. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2017-3142
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 11:59 UTC · Revision 1
Source evidence
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into: providing an AXFR of a zone to an unauthorized recipient or accepting bogus NOTIFY packets. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2.
osv:CVE-2017-3142
Complete source record
{
"id": "0198ac6ea208970044152d5dfdfec94ef742def4b22c06cdb976ea4f0d9b0ad5",
"url": "https://osv.dev/vulnerability/CVE-2017-3142",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2017-3142",
"summary": "An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into: providing an AXFR of a zone to an unauthorized recipient or accepting bogus NOTIFY packets. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2.",
"evidence": "osv:CVE-2017-3142",
"products": [],
"severity": "low",
"structured": {
"id": "CVE-2017-3142",
"aliases": [
"CVE-2017-3142"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/isc-projects/bind9",
"type": "GIT",
"events": [
{
"introduced": "600305bf9b2e7ab79b95989190f84fdcf4140cc1"
},
{
"last_affected": "8fc2e36186691698d247ab040b83793a9189de73"
},
{
"introduced": "3514c49b2fbcdf95b2735878e2487fce9a3ddad5"
},
{
"last_affected": "1a7c6f9dc8b32b52a4462ec0a9b8fa40da628546"
},
{
"introduced": "63fbb3ea39094353765c04a6066b9e1d1013992a"
},
{
"last_affected": "feb005b1b94f0493cd69d70a77a30a15b9a62993"
},
{
"introduced": "1477c19dd9a347ee19a42dac227f299a4680506f"
},
{
"last_affected": "e3dc2e7b9941566190fd2691e1c71ce232f9a7c6"
},
{
"introduced": "8a2d9ba36c16111ebb3be1a1c61fa0ebc2610c40"
},
{
"last_affected": "e7f06a85359873b4822acac1b87a885310fd6ac2"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.4.0"
},
{
"last_affected": "9.8.8"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.9.0"
},
{
"last_affected": "9.9.10"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.10.0"
},
{
"last_affected": "9.10.5"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.11.0"
},
{
"last_affected": "9.11.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.9.0:p1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.9.0-p1"
},
{
"last_affected": "9.9.0-p1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.9.3-s1"
},
{
"last_affected": "9.9.3-s1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.9.10:s2:*:*:*:*:*:*",
"range": [
{
"introduced": "9.9.10-s2"
},
{
"last_affected": "9.9.10-s2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.10.5:p1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.10.5-p1"
},
{
"last_affected": "9.10.5-p1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.10.5:s1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.10.5-s1"
},
{
"last_affected": "9.10.5-s1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.10.5:s2:*:*:*:*:*:*",
"range": [
{
"introduced": "9.10.5-s2"
},
{
"last_affected": "9.10.5-s2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.11.1:p1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.11.1-p1"
},
{
"last_affected": "9.11.1-p1"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"9.10.5-p1",
"9.10.5-s2",
"9.11.1-p1",
"9.9.0-p1",
"9.9.10-s2",
"9.9.3-s1",
"v9.9.10",
"v9.9.10rc3",
"v9.9.10rc2",
"v9.9.10rc1",
"v9.9.10b1",
"v9.11.1b1",
"v9.11.0",
"v9.9.9",
"v9.9.9rc1",
"v9.9.9b2",
"v9.9.9b1",
"v9.9.8",
"v9.9.8rc1",
"v9.9.8b1",
"v9.9.7",
"v9.9.7rc2",
"v9.9.7rc1",
"v9.9.7b1",
"v9.9.6",
"v9.9.6rc2",
"v9.9.6rc1",
"v9.9.6b2",
"v9.9.6b1",
"v9.9.5",
"v9.9.5rc2",
"v9.9.5rc1",
"v9.9.5b1",
"v9.9.4",
"v9.9.4rc2",
"v9.9.4b1",
"v9.9.3",
"v9.9.3rc2",
"v9.9.3rc1",
"v9.9.3b2",
"v9.9.3b1",
"v9.9.2rc1",
"v9.9.2b1",
"v9.9.1",
"v9.9.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-3142.json"
}
},
{
"ranges": [
{
"repo": "https://gitlab.isc.org/isc-projects/bind9",
"type": "GIT",
"events": [
{
"introduced": "600305bf9b2e7ab79b95989190f84fdcf4140cc1"
},
{
"last_affected": "8fc2e36186691698d247ab040b83793a9189de73"
},
{
"introduced": "3514c49b2fbcdf95b2735878e2487fce9a3ddad5"
},
{
"last_affected": "1a7c6f9dc8b32b52a4462ec0a9b8fa40da628546"
},
{
"introduced": "63fbb3ea39094353765c04a6066b9e1d1013992a"
},
{
"last_affected": "feb005b1b94f0493cd69d70a77a30a15b9a62993"
},
{
"introduced": "1477c19dd9a347ee19a42dac227f299a4680506f"
},
{
"last_affected": "e3dc2e7b9941566190fd2691e1c71ce232f9a7c6"
},
{
"introduced": "8a2d9ba36c16111ebb3be1a1c61fa0ebc2610c40"
},
{
"last_affected": "e7f06a85359873b4822acac1b87a885310fd6ac2"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.4.0"
},
{
"last_affected": "9.8.8"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.9.0"
},
{
"last_affected": "9.9.10"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.10.0"
},
{
"last_affected": "9.10.5"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.11.0"
},
{
"last_affected": "9.11.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.9.0:p1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.9.0-p1"
},
{
"last_affected": "9.9.0-p1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.9.3-s1"
},
{
"last_affected": "9.9.3-s1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.9.10:s2:*:*:*:*:*:*",
"range": [
{
"introduced": "9.9.10-s2"
},
{
"last_affected": "9.9.10-s2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.10.5:p1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.10.5-p1"
},
{
"last_affected": "9.10.5-p1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.10.5:s1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.10.5-s1"
},
{
"last_affected": "9.10.5-s1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.10.5:s2:*:*:*:*:*:*",
"range": [
{
"introduced": "9.10.5-s2"
},
{
"last_affected": "9.10.5-s2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:isc:bind:9.11.1:p1:*:*:*:*:*:*",
"range": [
{
"introduced": "9.11.1-p1"
},
{
"last_affected": "9.11.1-p1"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"9.10.5-p1",
"9.10.5-s2",
"9.11.1-p1",
"9.9.0-p1",
"9.9.10-s2",
"9.9.3-s1",
"v9.9.10",
"v9.9.10rc3",
"v9.9.10rc2",
"v9.9.10rc1",
"v9.9.10b1",
"v9.11.1b1",
"v9.11.0",
"v9.9.9",
"v9.9.9rc1",
"v9.9.9b2",
"v9.9.9b1",
"v9.9.8",
"v9.9.8rc1",
"v9.9.8b1",
"v9.9.7",
"v9.9.7rc2",
"v9.9.7rc1",
"v9.9.7b1",
"v9.9.6",
"v9.9.6rc2",
"v9.9.6rc1",
"v9.9.6b2",
"v9.9.6b1",
"v9.9.5",
"v9.9.5rc2",
"v9.9.5rc1",
"v9.9.5b1",
"v9.9.4",
"v9.9.4rc2",
"v9.9.4b1",
"v9.9.3",
"v9.9.3rc2",
"v9.9.3rc1",
"v9.9.3b2",
"v9.9.3b1",
"v9.9.2rc1",
"v9.9.2b1",
"v9.9.1",
"v9.9.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-3142.json"
}
}
],
"modified": "2026-10-26T10:45:05.354850951Z",
"provider": "osv",
"references": [
"https://access.redhat.com/errata/RHSA-2017:1679",
"https://access.redhat.com/errata/RHSA-2017:1680",
"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03772en_us",
"https://kb.isc.org/docs/aa-01504",
"https://security.netapp.com/advisory/ntap-20190830-0003/",
"https://www.debian.org/security/2017/dsa-3904"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
},
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_desktop",
"extracted_events": [
{
"range": [
{
"introduced": "6.0"
},
{
"last_affected": "6.0"
},
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server",
"extracted_events": [
{
"range": [
{
"introduced": "6.0"
},
{
"last_affected": "6.0"
},
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_aus",
"extracted_events": [
{
"range": [
{
"introduced": "7.3"
},
{
"last_affected": "7.3"
},
{
"introduced": "7.4"
},
{
"last_affected": "7.4"
},
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_eus",
"extracted_events": [
{
"range": [
{
"introduced": "7.3"
},
{
"last_affected": "7.3"
},
{
"introduced": "7.4"
},
{
"last_affected": "7.4"
},
{
"introduced": "7.5"
},
{
"last_affected": "7.5"
},
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_tus",
"extracted_events": [
{
"range": [
{
"introduced": "7.3"
},
{
"last_affected": "7.3"
},
{
"introduced": "7.6"
},
{
"last_affected": "7.6"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_workstation",
"extracted_events": [
{
"range": [
{
"introduced": "6.0"
},
{
"last_affected": "6.0"
},
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2017-3142",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 450293,
"published_at": "2019-01-16T20:29:00.55+00:00"
}