CVE-2020-8622 — Reachable Assertion in Synology DNS Server

CWE-617 — Reachable AssertionCWE-400 — Uncontrolled Resource Consumption14 documents10 sources
Severity
6.5MEDIUMNVD
EPSS
2.6%
top 14.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
ISC Bind9Synology DNS ServerISC Bind+5 more
Timeline
PublishedAug 21
Latest updateMay 24

Description

In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, could send a truncated response to that request, triggering an assertion failure, causing the server to exit. Alternately, an off-path attacker would have to correctly guess when a TSIG-signed request was sent, along with other characteristics…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages7 packages

▶NVDsynology/dns_server< 2.2.2-5028
▶CVEListV5isc/bind99.0.0 — unspecified+6
▶Debianisc/bind9< 1:9.16.6-1+3
▶Ubuntuisc/bind9< 1:9.9.5.dfsg-3ubuntu0.19+esm3
▶NVDisc/bind9.0.0 — 9.11.21+4

Also affects: Debian Linux 10.0, 9.0, Fedora 31, 32, Ubuntu Linux 12.04, 14.04, 16.04, 18.04, 20.04

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-fh6r-7j2f-pmw4: In BIND 9↗2022-05-24
▶
OSV
bind9 vulnerability↗2020-08-24
▶
OSV
CVE-2020-8622: In BIND 9↗2020-08-21
▶
CVEList
A truncated TSIG response can lead to an assertion failure↗2020-08-21
▶

📋Vendor Advisories

6
Oracle
Oracle Oracle Communications Risk Matrix: Provisioning (BIND) — CVE-2020-8622↗2021-10-15
▶
Ubuntu
Bind vulnerability↗2020-08-24
▶
Ubuntu
Bind vulnerabilities↗2020-08-21
▶
Red Hat
bind: truncated TSIG response can lead to an assertion failure↗2020-08-20
▶
Microsoft
A truncated TSIG response can lead to an assertion failure↗2020-08-11
▶

💬Community

3
Bugzilla
CVE-2019-8622 webkitgtk: Multiple memory corruption issues leading to arbitrary code execution↗2020-09-08
▶
Bugzilla
CVE-2020-8622 bind: A truncated TSIG response can lead to an assertion failure [fedora-all]↗2020-08-21
▶
Bugzilla
CVE-2020-8622 bind: truncated TSIG response can lead to an assertion failure↗2020-08-18
▶
CVE-2020-8622 — Reachable Assertion in Synology | cvebase