CVE-2020-8621 in BIND

要約

〜によって MITRE

In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward only' are not affected.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• 責任者: Internet Systems Consortium (ISC)
• 予約する: 2020年02月05日
• モデレーション: 承諾済み
• エントリ: VDB-160172
• CPE: 準備完了
• CWE: CWE-404 (確認済み)
• CVSS: 7.5 (NVD)
• EPSS: 0.02944
• KEV: いいえ
• アクティビティ: 非常低い
• セクター: Finance, Telecommunication, ...

ソース

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-8621
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-8621
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-8621/