USN-3346-2

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-3346-2

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3346-2.json

JSON Data

https://api.osv.dev/v1/vulns/USN-3346-2

Published

2017-09-18T17:15:08Z

Modified

2026-02-10T04:41:09Z

Summary

bind9 regression

Details

USN-3346-1 fixed vulnerabilities in Bind. The fix for CVE-2017-3142 introduced a regression in the ability to receive an AXFR or IXFR in the case where TSIG is used and not every message is signed. This update fixes the problem.

In addition, this update adds the new root zone key signing key (KSK).

Original advisory details:

Clément Berthaux discovered that Bind did not correctly check TSIG authentication for zone update requests. An attacker could use this to improperly perform zone updates. (CVE-2017-3143)

Clément Berthaux discovered that Bind did not correctly check TSIG authentication for zone transfer requests. An attacker could use this to improperly transfer entire zones. (CVE-2017-3142)

References

Affected packages

Ubuntu:14.04:LTS / bind9

Package

Name: bind9
Purl: pkg:deb/ubuntu/bind9@1:9.9.5.dfsg-3ubuntu0.16?arch=source&distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:9.9.5.dfsg-3ubuntu0.16

Affected versions

1:9.*

1:9.9.3.dfsg.P2-4ubuntu1

1:9.9.3.dfsg.P2-4ubuntu2

1:9.9.3.dfsg.P2-4ubuntu3

1:9.9.5.dfsg-2

1:9.9.5.dfsg-3

1:9.9.5.dfsg-3ubuntu0.1

1:9.9.5.dfsg-3ubuntu0.2

1:9.9.5.dfsg-3ubuntu0.3

1:9.9.5.dfsg-3ubuntu0.4

1:9.9.5.dfsg-3ubuntu0.5

1:9.9.5.dfsg-3ubuntu0.6

1:9.9.5.dfsg-3ubuntu0.7

1:9.9.5.dfsg-3ubuntu0.8

1:9.9.5.dfsg-3ubuntu0.9

1:9.9.5.dfsg-3ubuntu0.10

1:9.9.5.dfsg-3ubuntu0.11

1:9.9.5.dfsg-3ubuntu0.12

1:9.9.5.dfsg-3ubuntu0.13

1:9.9.5.dfsg-3ubuntu0.14

1:9.9.5.dfsg-3ubuntu0.15

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.16",
            "binary_name": "bind9"
        },
        {
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.16",
            "binary_name": "bind9-host"
        },
        {
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.16",
            "binary_name": "bind9utils"
        },
        {
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.16",
            "binary_name": "dnsutils"
        },
        {
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.16",
            "binary_name": "host"
        },
        {
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.16",
            "binary_name": "libbind-dev"
        },
        {
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.16",
            "binary_name": "libbind9-90"
        },
        {
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.16",
            "binary_name": "libdns100"
        },
        {
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.16",
            "binary_name": "libisc95"
        },
        {
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.16",
            "binary_name": "libisccc90"
        },
        {
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.16",
            "binary_name": "libisccfg90"
        },
        {
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.16",
            "binary_name": "liblwres90"
        },
        {
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.16",
            "binary_name": "lwresd"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3346-2.json"

cves_map

{
    "ecosystem": "Ubuntu:14.04:LTS",
    "cves": []
}

Ubuntu:16.04:LTS / bind9

Package

Name: bind9
Purl: pkg:deb/ubuntu/bind9@1:9.10.3.dfsg.P4-8ubuntu1.8?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:9.10.3.dfsg.P4-8ubuntu1.8

Affected versions

1:9.*

1:9.9.5.dfsg-11ubuntu1

1:9.9.5.dfsg-12

1:9.9.5.dfsg-12.1

1:9.9.5.dfsg-12.1ubuntu1

1:9.10.3.dfsg.P2-4

1:9.10.3.dfsg.P2-5

1:9.10.3.dfsg.P4-3

1:9.10.3.dfsg.P4-4

1:9.10.3.dfsg.P4-5

1:9.10.3.dfsg.P4-8

1:9.10.3.dfsg.P4-8ubuntu1

1:9.10.3.dfsg.P4-8ubuntu1.1

1:9.10.3.dfsg.P4-8ubuntu1.2

1:9.10.3.dfsg.P4-8ubuntu1.3

1:9.10.3.dfsg.P4-8ubuntu1.4

1:9.10.3.dfsg.P4-8ubuntu1.5

1:9.10.3.dfsg.P4-8ubuntu1.6

1:9.10.3.dfsg.P4-8ubuntu1.7

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "bind9"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "bind9-host"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "bind9utils"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "dnsutils"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "host"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "libbind-dev"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "libbind-export-dev"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "libbind9-140"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "libdns-export162"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "libdns162"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "libirs-export141"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "libirs141"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "libisc-export160"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "libisc160"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "libisccc-export140"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "libisccc140"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "libisccfg-export140"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "libisccfg140"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "liblwres141"
        },
        {
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.8",
            "binary_name": "lwresd"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3346-2.json"

cves_map

{
    "ecosystem": "Ubuntu:16.04:LTS",
    "cves": []
}