Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2020-8621

Good to know:

icon
icon

Date: August 21, 2020

In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward only' are not affected.

Language: C++

Severity Score

Related Resources (12)

https://security.gentoo.org/glsa/202008-19
https://security.netapp.com/advisory/ntap-20200827-0003/
https://security-tracker.debian.org/tracker/CVE-2020-8621
https://people.canonical.com/~ubuntu-security/cve/CVE-2020-8621
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html
https://usn.ubuntu.com/4468-1/
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html
https://security.alpinelinux.org/vuln/CVE-2020-8621
https://nvd.nist.gov/vuln/detail/CVE-2020-8621
https://www.synology.com/security/advisory/Synology_SA_20_19
https://kb.isc.org/docs/cve-2020-8621
https://www.mend.io/vulnerability-database/CVE-2020-8621

Severity Score

Weakness Type (CWE)

Input Validation

CWE-20

Reachable Assertion

CWE-617

Top Fix

icon

Upgrade Version

Upgrade to version 9.16.6;9.17.4

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us