4.9
Medium
CVE-2020-8618 An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger…
Description
An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BIND9 | Versions not published |
References
- kb.isc.org kb.isc.org
- security.netapp.com security.netapp.com
- USN-4399-1 usn.ubuntu.com
- openSUSE-SU-2020:1699 lists.opensuse.org
- openSUSE-SU-2020:1701 lists.opensuse.org
Timeline
- Published
- Last modified
Other CVEs of BIND9
The 23 CVEs of BIND9 →
CVE-2022-3080
By sending specific queries to the resolver, an attacker can cause named to crash
7.5
High
CVE-2022-38178
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small…
7.5
High
CVE-2022-38177
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small…
7.5
High
CVE-2022-2906
An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of…
7.5
High