CVE-2020-8621

높음 7.5CVE-2020-8621 · Published 21/08/2020 · updated 17/06/2026

요약

CVE-2020-8621은(는) bind (isc), dns server (synology)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 3.1%, 전체 취약점의 87.6%보다 높음.
조치: 2.2.2-5027 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
bind isc	`≥ 9.14.0, ≤ 9.16.5≥ 9.17.0, ≤ 9.17.3`	No fix yet
dns server synology	`< 2.2.2-5027`	`2.2.2-5027`

Description

In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward only' are not affected.

References

lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html · Mailing List
kb.isc.org/docs/cve-2020-8621 · Vendor Advisory
security.gentoo.org/glsa/202008-19 · Third Party Advisory
security.netapp.com/advisory/ntap-20200827-0003 · Third Party Advisory
usn.ubuntu.com/4468-1 · Third Party Advisory
synology.com/security/advisory/Synology_SA_20_19 · Third Party Advisory

bind의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

bind

isc

≥ 9.14.0, ≤ 9.16.5≥ 9.17.0, ≤ 9.17.3

No fix yet

dns server

synology

< 2.2.2-5027

2.2.2-5027

bind의 다른 취약점

모두 보기 →