CVE-2020-8618
published 2020-06-17CVE-2020-8618: An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially…
medium4.9CVSS 3.1
AVNACLPRHUINSUCNINAH
An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| debian | bind9 | < bind9 1:9.16.4-1 (bookworm) | bind9 1:9.16.4-1 (bookworm) |
| isc | bind | 9.16.0 – 9.16.3 | — |
| isc | bind9 | — | — |
| isc | bind9 | >= 0 < 1:9.16.4-1 | 1:9.16.4-1 |
| isc | bind9 | >= 0 < 1:9.16.4-1 | 1:9.16.4-1 |
| isc | bind9 | >= 0 < 1:9.16.4-1 | 1:9.16.4-1 |
| isc | bind9 | >= 0 < 1:9.16.4-1 | 1:9.16.4-1 |
| isc | bind9 | >= 0 < 1:9.16.1-0ubuntu2.2 | 1:9.16.1-0ubuntu2.2 |
| msrc | cbl_mariner_1.0_arm | — | — |
| msrc | cbl_mariner_1.0_x64 | — | — |
| msrc | cm1_bind_9.16.3-2_on_cbl_mariner_1.0 | — | — |
| opensuse | leap | — | — |
| opensuse | leap | — | — |
CVSS provenance
nvdv3.14.9MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
osv4.9MEDIUM