CVE-2020-8618

An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients.

Published: Jun 18, 2020
Updated: Apr 14, 2023
CVE: CVE-2020-8618
Severity: Low
Exploit:

CVSS v3:

Severity: Low
Score: 4.9
AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

Severity: Low
Score: 4
AV:N/AC:L/Au:S/C:N/I:N/A:P

CWEs:

CWE-617

Affected Software
References

Software	From	Fixed in
isc / bind	9.16.0	9.16.3.x
opensuse / leap	15.1	15.1.x
opensuse / leap	15.2	15.2.x
canonical / ubuntu_linux	20.04	20.04.x

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html
https://kb.isc.org/docs/cve-2020-8618
https://security.netapp.com/advisory/ntap-20200625-0003/
https://usn.ubuntu.com/4399-1/

Vulnerability Database

CVE-2020-8618

Deep Security Visibility Without the Complexity