Authentication bypass in Knot DNS - CVE-2017-11104

Vulnerability identifier: #VU7550

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-11104

CWE-ID: CWE-287

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to bypass security restrictions on the target system.

The weakness exists due to a flaw in the TSIG protocol implementation. A remote attacker can use a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set.

Knot DNS
Debian Linux
Fedora
SUSE Linux
Opensuse
knot (Alpine package)
openSUSE Leap
knot

The vulnerability is addressed in the following versions: 2.4.5 and 2.5.2.

knot - addressed in versions 2.4.5-1.fc26, 2.5.3-2.el7

• Exploit #2168 - CVE-2017-3143 (Exploit for TSIG bypass vulnerabilities in Bind (CVE-2017-3143) and Knot DNS (CVE-2017-11104)) (March 18, 2020)

• Debian update for knot
• OpenSUSE Linux update for knot
• OpenSUSE Linux update for knot
• OpenSUSE Linux update for knot
• OpenSUSE Linux update for knot
• Authentication bypass in knot (Alpine package)
• OpenSUSE Linux update for knot
• Fedora 26 update for knot
• Fedora EPEL 7 update for knot