CVE-2020-8619

 

Published at: - 18-06-2020 12:15

Last modified: - 07-10-2022 05:26

Total changes: - 2

Description

In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone contains an empty non-terminal entry containing an asterisk ("*") character, this defect cannot be encountered. A would-be attacker who is allowed to change zone content could theoretically introduce such a record in order to exploit this condition to cause denial of service, though we consider the use of this vector unlikely because any such attack would require a significant privilege level and be easily traceable.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://kb.isc.org/docs/cve-2020-8619
• FEDORA-2020-54a91444ff-Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20200625-0003/
• FEDORA-2020-5f8da4b260-Mailing List, Patch, Third Party Advisory
• USN-4399-1-Third Party Advisory
• DSA-4752-Third Party Advisory
• openSUSE-SU-2020:1699-Mailing List, Third Party Advisory
• openSUSE-SU-2020:1701-Mailing List, Third Party Advisory

 

Keywords

NVD

 

CVE-2020-8619

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures