Description
* A flaw was found in the way BIND handled TSIG authentication for dynamic
updates. A remote attacker able to communicate with an authoritative BIND server
could use this flaw to manipulate the contents of a zone, by forging a valid
TSIG or SIG(0) signature for a dynamic update request. (CVE-2017-3143)
* A flaw was found in the way BIND handled TSIG authentication of AXFR requests.
A remote attacker, able to communicate with an authoritative BIND server, could
use this flaw to view the entire contents of a zone by sending a specially
constructed request packet. (CVE-2017-3142)