medium4.9
CVE-2020-8618
An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially c…
Impact
An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Isc | Bind | from 9.16.0 through 9.16.3 |
| Opensuse | Leap | Versions 15.1, 15.2 |
| Netapp | Steelstore Cloud Integrated Storage | All versions |
| Canonical | Ubuntu Linux | Version 20.04 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html
- https://kb.isc.org/docs/cve-2020-8618
- https://security.netapp.com/advisory/ntap-20200625-0003/
- https://usn.ubuntu.com/4399-1/
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html
- https://kb.isc.org/docs/cve-2020-8618
- https://security.netapp.com/advisory/ntap-20200625-0003/
- https://usn.ubuntu.com/4399-1/