CVEvulnerability

CVE-2020-8621

7.5 HIGH Published 2020-08-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-08-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-617

Description

In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward only' are not affected.

Affected configurations

• isc bind (>= 9.14.0 <= 9.16.5) • isc bind (>= 9.17.0 <= 9.17.3) • opensuse leap 15.1 • opensuse leap 15.2 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • canonical ubuntu linux 20.04 • synology dns server (< 2.2.2-5027) • netapp steelstore cloud integrated storage

Related

Weakness · CWE (1)

  • CWE-617 Reachable Assertion weakness

References