CVE-2017-3142

CVE-2017-3142 describes an authentication bypass vulnerability in BIND versions 9.4.0 through 9.11.1-P1 and specific S-series releases. An attacker with knowledge of a valid TSIG key name and the ability to send and receive messages to an authoritative DNS server could circumvent TSIG authentication for AXFR requests, potentially leading to unauthorized zone transfers or acceptance of bogus NOTIFY packets. This vulnerability has a CVSS v3.0 score of 3.7 (Low), indicating a network attack vector with high attack complexity and a low impact on confidentiality. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB, although it has received some community discussion and media coverage.