4.3
Moyenne
CVE-2020-8624 In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects…
Description
In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset of the zone's content could abuse these unintended additional privileges to update other contents of the zone.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BIND9 9.17 | premières → dernières | 9.17.4 |
| BIND9 9.16 | premières → < 9.16.6 | 9.16.6 |
| BIND9 9.12 | 9.12.1 → dernières | Pas de correctif indiqué |
| BIND9 9.11 | premières → dernières | 9.11.22 |
| BIND9 9.10 | premières → dernières | Pas de correctif indiqué |
| BIND9 9.9 | premières → dernières | Pas de correctif indiqué |
Autres CVE de BIND9
Les 23 CVE de BIND9 →
CVE-2022-3080
By sending specific queries to the resolver, an attacker can cause named to crash
7.5
Élevée
CVE-2022-38178
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small…
7.5
Élevée
CVE-2022-38177
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small…
7.5
Élevée
CVE-2022-2906
An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of…
7.5
Élevée