In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, could send a truncated response to that request, triggering an assertion failure, causing the server to exit. Alternately, an off-path attacker would have to correctly guess when a TSIG-signed request was sent, along with other characteristics of the packet and message, and spoof a truncated response to trigger an assertion failure, causing the server to exit.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
|
Configuration 9 (hide)
|
History
07 Nov 2023, 03:26
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2020-08-21 21:15
Updated : 2024-02-28 17:47
NVD link : CVE-2020-8622
Mitre link : CVE-2020-8622
CVE.ORG link : CVE-2020-8622
JSON object : View
Products Affected
canonical
- ubuntu_linux
synology
- dns_server
debian
- debian_linux
fedoraproject
- fedora
opensuse
- leap
oracle
- communications_diameter_signaling_router
netapp
- steelstore_cloud_integrated_storage
isc
- bind
CWE
CWE-617
Reachable Assertion