CVE-2017-11104

Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and…

published July 8, 2017

CVSS
—
EPSS
3%
Percentile
85.6
In the wild
Unconfirmed
What it is

Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set, because of an improper TSIG validity period check.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02681 · 85.6th percentile
Published
2017-07-08T10:00Z
EPSS history
Timeline
  • 08 JUL 10:00Z
    Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and…
    cvelistv5