NetSight
IP …
medium6.5

CVE-2020-8622

In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the n…

Impact

In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, could send a truncated response to that request, triggering an assertion failure, causing the server to exit. Alternately, an off-path attacker would have to correctly guess when a TSIG-signed request was sent, along with other characteristics of the packet and message, and spoof a truncated response to trigger an assertion failure, causing the server to exit.

Affected products

VendorProductAffected versions
IscBind
from 9.0.0 through 9.11.21
from 9.12.0 through 9.16.5
from 9.17.0 through 9.17.3
Versions 9.9.3, 9.11.21
FedoraprojectFedora
Versions 31, 32
DebianDebian Linux
Versions 9.0, 10.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04, 20.04
NetappSteelstore Cloud Integrated Storage
All versions
OpensuseLeap
Versions 15.1, 15.2
SynologyDns Server
before 2.2.2-5028
OracleCommunications Diameter Signaling Router
from 8.0.0 through 8.5.0

Weakness classification

CWE-617

References