CVE-2017-3143 PoC — An error in TSIG authentication can permit unauthorized dynamic updates

Source

https://github.com/saaph/CVE-2017-3143

Associated Vulnerability

Title: An error in TSIG authentication can permit unauthorized dynamic updates (CVE-2017-3143)
Description:An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into accepting an unauthorized dynamic update. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2.

Description

Exploit for TSIG bypass vulnerabilities in Bind (CVE-2017-3143) and Knot DNS (CVE-2017-11104)

Readme

# TSIG Bypass exploit

Exploit for CVE-2017-3143 in Bind and CVE-2017-11104 in Knot DNS.
See https://www.synacktiv.com/ressources/CVE-2017-3143_BIND9_TSIG_dynamic_updates_vulnerability_Synacktiv.pdf for more info.

## Author

Clément Berthaux - clement (dot) berthaux (at) synacktiv (dot) com

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →