CVE-2020-8620
21.08.2020, 21:15
In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing the server to exit.Enginsight
| Vendor | Product | Version |
|---|---|---|
| isc | bind | 9.15.6 ≤ 𝑥 ≤ 9.16.5 |
| isc | bind | 9.17.0 ≤ 𝑥 ≤ 9.17.3 |
| isc | bind | 9.9.12:s1 |
| isc | bind | 9.9.13:s1 |
| isc | bind | 9.11.3:s1 |
| isc | bind | 9.11.21:s1 |
| opensuse | leap | 15.1 |
| opensuse | leap | 15.2 |
| netapp | steelstore_cloud_integrated_storage | - |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References