CVE-2020-8620

EUVD-2020-29468
In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing the server to exit.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
iscCNA
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
Affected Products (NVD)
VendorProductVersion
iscbind
9.15.6 ≤
𝑥
≤ 9.16.5
iscbind
9.17.0 ≤
𝑥
≤ 9.17.3
iscbind
9.9.12:s1
iscbind
9.9.13:s1
iscbind
9.11.3:s1
iscbind
9.11.21:s1
opensuseleap
15.1
opensuseleap
15.2
netappsteelstore_cloud_integrated_storage
-
canonicalubuntu_linux
12.04
canonicalubuntu_linux
16.04
canonicalubuntu_linux
18.04
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
bind9
bookworm
1:9.18.28-1~deb12u2
fixed
bookworm (security)
1:9.18.28-1~deb12u2
fixed
bullseye
1:9.16.50-1~deb11u2
fixed
bullseye (security)
1:9.16.50-1~deb11u1
fixed
buster
not-affected
sid
1:9.20.2-1
fixed
stretch
not-affected
trixie
1:9.20.2-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
bind9
bionic
not-affected
focal
Fixed 1:9.16.1-0ubuntu2.3
released
trusty
not-affected
xenial
not-affected
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html
https://kb.isc.org/docs/cve-2020-8620
https://security.gentoo.org/glsa/202008-19
https://security.netapp.com/advisory/ntap-20200827-0003/
https://usn.ubuntu.com/4468-1/
https://www.synology.com/security/advisory/Synology_SA_20_19
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html
https://kb.isc.org/docs/cve-2020-8620
https://security.gentoo.org/glsa/202008-19
https://security.netapp.com/advisory/ntap-20200827-0003/
https://usn.ubuntu.com/4468-1/
https://www.synology.com/security/advisory/Synology_SA_20_19