CVE-2020-8623
21.08.2020, 21:15
In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulnerable, the system must: * be running BIND that was built with "--enable-native-pkcs11" * be signing one or more zones with an RSA key * be able to receive queries from a possible attackerEnginsight
| Vendor | Product | Version |
|---|---|---|
| isc | bind | 9.10.0 ≤ 𝑥 ≤ 9.11.21 |
| isc | bind | 9.12.1 ≤ 𝑥 ≤ 9.16.5 |
| isc | bind | 9.17.0 ≤ 𝑥 ≤ 9.17.3 |
| isc | bind | 9.10.5:s1 |
| isc | bind | 9.11.21:s1 |
| opensuse | leap | 15.1 |
| opensuse | leap | 15.2 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 20.04 |
| synology | dns_server | 𝑥 < 2.2.2-5027 |
| netapp | steelstore_cloud_integrated_storage | - |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References