4.9
Medium
CVE-2020-8619 In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview…
Description
In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone contains an empty non-terminal entry containing an asterisk ("*") character, this defect cannot be encountered. A would-be attacker who is allowed to change zone content could theoretically introduce such a record in order to exploit this condition to cause denial of service, though we consider the use of this vector unlikely because any such attack would require a significant privilege level and be easily traceable.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BIND9 | Versions not published |
References
- kb.isc.org kb.isc.org
- FEDORA-2020-54a91444ff lists.fedoraproject.org
- security.netapp.com security.netapp.com
- FEDORA-2020-5f8da4b260 lists.fedoraproject.org
- USN-4399-1 usn.ubuntu.com
- DSA-4752 www.debian.org
- openSUSE-SU-2020:1699 lists.opensuse.org
- openSUSE-SU-2020:1701 lists.opensuse.org
Timeline
- Published
- Last modified
Other CVEs of BIND9
The 23 CVEs of BIND9 →
CVE-2022-3080
By sending specific queries to the resolver, an attacker can cause named to crash
7.5
High
CVE-2022-38178
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small…
7.5
High
CVE-2022-38177
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small…
7.5
High
CVE-2022-2906
An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of…
7.5
High