Published: 21/08/2020 Updated: 07/11/2023

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N

In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset of the zone's content could abuse these unintended additional privileges to update other contents of the zone.

Vulnerable Product	Search on Vulmon	Subscribe to Product
isc bind
isc bind 9.11.3
isc bind 9.9.12
isc bind 9.9.13
isc bind 9.11.21
debian debian linux 10.0
canonical ubuntu linux 18.04
netapp steelstore cloud integrated storage -
fedoraproject fedora 31
fedoraproject fedora 32
canonical ubuntu linux 20.04
canonical ubuntu linux 16.04
opensuse leap 15.1
opensuse leap 15.2

Debian Bug report logs - #966497 CVE-2020-8624: update-policy rules of type subdomain are enforced incorrectly Package: bind9; Maintainer for bind9 is Debian DNS Team <team+dns@trackerdebianorg>; Source for bind9 is src:bind9 (PTS, buildd, popcon) Reported by: Joop Boonen <joopboonen@credativde> Date: Wed, 29 Jul ...

Several vulnerabilities were discovered in BIND, a DNS server implementation CVE-2020-8619 It was discovered that an asterisk character in an empty non terminal can cause an assertion failure, resulting in denial of service CVE-2020-8622 Dave Feldman, Jeff Warren, and Joel Cunningham reported that a truncated TSIG response can le ...

Synopsis Moderate: bind security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for bind is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base sco ...

Synopsis Moderate: bind security update Type/Severity Security Advisory: Moderate Topic An update for bind is now available for Red Hat Enterprise Linux 77 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System ( ...

Synopsis Moderate: bind security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for bind is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System ( ...

Synopsis Moderate: OpenShift Container Platform 4520 bug fix and golang security update Type/Severity Security Advisory: Moderate Topic Red Hat OpenShift Container Platform release 4520 is now available with updates to packages and images that fix several bugsThis release includes a security update for ...

A flaw was found in bind An assertion failure can occur when trying to verify a truncated response to a TSIG-signed request The highest threat from this vulnerability is to system availability (CVE-2020-8622) A flaw was found in bind An assertion failure can occur when a specially crafted query for a zone signed with an RSA key BIND must be co ...

CWE-269 https://kb.isc.org/docs/cve-2020-8624 https://security.netapp.com/advisory/ntap-20200827-0003/https://usn.ubuntu.com/4468-1/https://www.debian.org/security/2020/dsa-4752 https://security.gentoo.org/glsa/202008-19 https://www.synology.com/security/advisory/Synology_SA_20_19 http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DQN62GBMCIC5AY4KYADGXNKVY6AJKSJE/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKAMJZXR66P6S5LEU4SN7USSNCWTXEXP/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966497 https://nvd.nist.gov https://www.debian.org/security/2020/dsa-4752

CVE-2020-8624

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect