In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward only' are not affected.
References
Link | Resource |
---|---|
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html | Mailing List Third Party Advisory |
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html | Mailing List Third Party Advisory |
https://kb.isc.org/docs/cve-2020-8621 | Vendor Advisory |
https://security.gentoo.org/glsa/202008-19 | Third Party Advisory |
https://security.netapp.com/advisory/ntap-20200827-0003/ | Third Party Advisory |
https://usn.ubuntu.com/4468-1/ | Third Party Advisory |
https://www.synology.com/security/advisory/Synology_SA_20_19 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
No history.
Information
Published : 2020-08-21 21:15
Updated : 2024-02-28 17:47
NVD link : CVE-2020-8621
Mitre link : CVE-2020-8621
CVE.ORG link : CVE-2020-8621
JSON object : View
Products Affected
canonical
- ubuntu_linux
synology
- dns_server
opensuse
- leap
netapp
- steelstore_cloud_integrated_storage
isc
- bind
CWE
CWE-617
Reachable Assertion