4.9
Moyenne
CVE-2020-8618 An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger…
Description
An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BIND9 | Versions non publiées |
Références
- kb.isc.org kb.isc.org
- security.netapp.com security.netapp.com
- USN-4399-1 usn.ubuntu.com
- openSUSE-SU-2020:1699 lists.opensuse.org
- openSUSE-SU-2020:1701 lists.opensuse.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de BIND9
Les 23 CVE de BIND9 →
CVE-2022-3080
By sending specific queries to the resolver, an attacker can cause named to crash
7.5
Élevée
CVE-2022-38178
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small…
7.5
Élevée
CVE-2022-38177
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small…
7.5
Élevée
CVE-2022-2906
An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of…
7.5
Élevée