NetSight
IP …
medium4.3

CVE-2020-8624

In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1…

Impact

In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset of the zone's content could abuse these unintended additional privileges to update other contents of the zone.

Affected products

VendorProductAffected versions
IscBind
from 9.9.12 through 9.9.13
from 9.10.7 through 9.10.8
from 9.11.3 through 9.11.21
from 9.12.1 through 9.16.5
from 9.17.0 through 9.17.3
Version 9.9.12
NetappSteelstore Cloud Integrated Storage
All versions
CanonicalUbuntu Linux
Versions 16.04, 18.04, 20.04
DebianDebian Linux
Version 10.0
FedoraprojectFedora
Versions 31, 32
OpensuseLeap
Versions 15.1, 15.2

Weakness classification

CWE-269

References