Vulnerability
CVE-2017-3142
CVE-2017-3142 is a low-severity vulnerability (CVSS v3.0 3.7). As of 2026-11-08, 6 hosts in our data show software it affects on an open service in 2 countries.
An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies solely on TSIG keys for protection with no other ACL protection could be manipulated into: providing an AXFR of a zone to an unauthorized recipient or accepting bogus NOTIFY packets. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1, 9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2.
- Published
- 2019-01-16
- Last modified
- 2026-06-17
- CVSS score
- 3.7 CVSS v3.0
- CVSS vector (v3.0)
- CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- Exploit likelihood (EPSS)
- 5.4% in the next 30 days (top 8% of CVEs)
Exposure in our data
6 hosts
Hosts whose banner shows an affected software version on a service open at their latest check.
Not counted: 426 hosts with this CVE only from an older observation.
Not counted: 5 hosts where the software version is too vague to tell (only a major release).
Not counted: 2 more on distribution builds that may be patched (the distribution may have backported the fix without changing the version).
Counted 2026-11-08 04:20 UTC
By country
| Latvia LV | 4 |
| Estonia EE | 2 |
Affected software seen
| bind 9.8.2rc1 | 3 |
| bind 9.10.3-p4 | 1 |
| bind 9.7.3 | 1 |
| bind 9.9.4 | 1 |