Skip to content
Sign in
4.3 Medium

CVE-2020-8624 In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects…

Description

In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset of the zone's content could abuse these unintended additional privileges to update other contents of the zone.

Affected products and versions

Product Affected versions Fixed in
BIND9 9.17 earliest → latest 9.17.4
BIND9 9.16 earliest → < 9.16.6 9.16.6
BIND9 9.12 9.12.1 → latest No fix stated
BIND9 9.11 earliest → latest 9.11.22
BIND9 9.10 earliest → latest No fix stated
BIND9 9.9 earliest → latest No fix stated

Other CVEs of BIND9

The 23 CVEs of BIND9 →
CVE-2022-3080 By sending specific queries to the resolver, an attacker can cause named to crash 7.5 High CVE-2022-38178 By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small… 7.5 High CVE-2022-38177 By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small… 7.5 High CVE-2022-2906 An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of… 7.5 High
Track this CVE