Lucene search
PRIOn knowledge basePRION:CVE-2020-8621HistoryAug 21, 2020 - 9:15 p.m.
Design/Logic Flaw
2020-08-2121:15:00
PRIOn knowledge base
www.prio-n.com
16
In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and ‘forward first’ then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that ‘forward only’ are not affected.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 18.04 | |
| ubuntu_linux | eq | 20.04 | |
| ubuntu_linux | eq | 16.04 | |
| bind | ge | 9.17.0 | |
| bind | le | 9.17.3 | |
| bind | ge | 9.14.0 | |
| bind | le | 9.16.5 | |
| leap | eq | 15.1 | |
| leap | eq | 15.2 | |
| dns_server | eq | < 2.2.2-5027 |
References
lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html
lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html
kb.isc.org/docs/cve-2020-8621
security.gentoo.org/glsa/202008-19
security.netapp.com/advisory/ntap-20200827-0003/
usn.ubuntu.com/4468-1/
www.synology.com/security/advisory/Synology_SA_20_19
Related
redhatcve
redhatcve
CVE-2020-8621
2020-08-21 02:38:21
openvas
openvas
ISC BIND DoS Vulnerability (CVE-2020-8621) - Windows
2020-08-21 00:00:00
ISC BIND DoS Vulnerability (CVE-2020-8621) - Linux
2020-08-21 00:00:00
Ubuntu: Security Advisory (USN-4468-1)
2020-08-22 00:00:00
nvd
nvd
CVE-2020-8621
2020-08-21 21:15:12
cve
cve
CVE-2020-8621
2020-08-21 21:15:12
cbl_mariner
cbl_mariner
CVE-2020-8621 affecting package bind 9.16.3-3
2020-10-08 18:09:52
nessus
nessus
ISC BIND 9.14.x < 9.16.6, 9.17.x < 9.17.4 DoS
2020-08-27 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Bind vulnerabilities (USN-4468-1)
2020-08-24 00:00:00
GLSA-202008-19 : BIND: Multiple vulnerabilities
2020-08-31 00:00:00
alpinelinux
alpinelinux
CVE-2020-8621
2020-08-21 21:15:12
osv
osv
CVE-2020-8621
2020-08-21 21:15:12
debiancve
debiancve
CVE-2020-8621
2020-08-21 21:15:12
ubuntucve
ubuntucve
CVE-2020-8621
2020-08-20 00:00:00
cvelist
cvelist
f5
f5
K75649300 : BIND vulnerability CVE-2020-8621
2020-08-21 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-08-31 04:08:30
gentoo
gentoo
BIND: Multiple vulnerabilities
2020-08-29 00:00:00
ubuntu
ubuntu
Bind vulnerabilities
2020-08-21 00:00:00
cisa
cisa
ISC Releases Security Advisories for BIND
2020-08-21 00:00:00
suse
suse
Security update for bind (moderate)
2020-10-20 00:00:00
Security update for bind (moderate)
2020-10-19 00:00:00