Alpine: bind: security update to 9.11.3-r0

high Tenable Self-Hosted Container Security Plugin ID 403641

Description

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

- If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to
a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.5,
9.11.0->9.11.1, 9.9.10-S1, 9.10.5-S1. (CVE-2017-3140)

- The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve
privilege escalation if the host file system permissions allow this. Affects BIND 9.2.6-P2->9.2.9,
9.3.2-P1->9.3.6, 9.4.0->9.8.8, 9.9.0->9.9.10, 9.10.0->9.10.5, 9.11.0->9.11.1, 9.9.3-S1->9.9.10-S1,
9.10.5-S1. (CVE-2017-3141)

- An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge
of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully
constructed request packet. A server that relies solely on TSIG keys for protection with no other ACL
protection could be manipulated into: providing an AXFR of a zone to an unauthorized recipient or
accepting bogus NOTIFY packets. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1,
9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2. (CVE-2017-3142)

- An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge
of a valid TSIG key name for the zone and service being targeted may be able to manipulate BIND into
accepting an unauthorized dynamic update. Affects BIND 9.4.0->9.8.8, 9.9.0->9.9.10-P1, 9.10.0->9.10.5-P1,
9.11.0->9.11.1-P1, 9.9.3-S1->9.9.10-S2, 9.10.5-S1->9.10.5-S2. (CVE-2017-3143)

Plugin Details

Severity: High

ID: 403641

Version: Revision 1.25

Type: Local

Family: Alpine Linux Local Security Checks

Published: 10/31/2023

Updated: 7/2/2026

Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.15

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2017-3141

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 7

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 6/14/2017

Reference Information

CVE: CVE-2017-3140, CVE-2017-3141, CVE-2017-3142, CVE-2017-3143

BID: 99088, 99089, 99337, 99339

IAVA: 2017-A-0183-S, 2017-A-0195-S

Detections

Analytics