CVE-2020-8621

ALTO 7.5CVE-2020-8621 · Published 21/08/2020 · updated 17/06/2026

In breve

CVE-2020-8621 è una vulnerabilità ALTO (CVSS 7.5) che riguarda bind (isc), dns server (synology).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.1%, superiore al 87.6% delle vulnerabilità.
Correzione: aggiornare a 2.2.2-5027 o successiva.

Package	Affected versions	Patched versions
bind isc	`≥ 9.14.0, ≤ 9.16.5≥ 9.17.0, ≤ 9.17.3`	No fix yet
dns server synology	`< 2.2.2-5027`	`2.2.2-5027`

Description

In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward only' are not affected.

References

lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html · Mailing List
kb.isc.org/docs/cve-2020-8621 · Vendor Advisory
security.gentoo.org/glsa/202008-19 · Third Party Advisory
security.netapp.com/advisory/ntap-20200827-0003 · Third Party Advisory
usn.ubuntu.com/4468-1 · Third Party Advisory
synology.com/security/advisory/Synology_SA_20_19 · Third Party Advisory

Altre vulnerabilità di bind

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

bind

isc

≥ 9.14.0, ≤ 9.16.5≥ 9.17.0, ≤ 9.17.3

No fix yet

dns server

synology

< 2.2.2-5027

2.2.2-5027

Altre vulnerabilità di bind

Vedi tutto →