5.9

CVE-2020-8617

A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c

Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. In releases of BIND dating from March 2018 and after, an assertion check in tsig.c detects this inconsistent state and deliberately exits. Prior to the introduction of the check the server would continue operating in an inconsistent state, with potentially harmful results.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Isc ≫ Bind Version >= 9.0.0 <= 9.11.18
Isc ≫ Bind Version >= 9.12.0 <= 9.12.4
Isc ≫ Bind Version >= 9.13.0 <= 9.13.7
Isc ≫ Bind Version >= 9.14.0 <= 9.14.11
Isc ≫ Bind Version >= 9.15.0 <= 9.15.6
Isc ≫ Bind Version >= 9.16.0 <= 9.16.2
Isc ≫ Bind Version >= 9.17.0 <= 9.17.1
Isc ≫ Bind Version 9.12.4 Update p1
Isc ≫ Bind Version 9.12.4 Update p2
Isc ≫ Bind Version 9.9.3 Update s1 SwEdition supported_preview
Isc ≫ Bind Version 9.10.5 Update s1 SwEdition supported_preview
Isc ≫ Bind Version 9.10.7 Update s1 SwEdition supported_preview
Isc ≫ Bind Version 9.11.3 Update s1 SwEdition supported_preview
Isc ≫ Bind Version 9.11.5 Update s3 SwEdition supported_preview
Isc ≫ Bind Version 9.11.5 Update s5 SwEdition supported_preview
Isc ≫ Bind Version 9.11.6 Update s1 SwEdition supported_preview
Isc ≫ Bind Version 9.11.7 Update s1 SwEdition supported_preview
Isc ≫ Bind Version 9.11.8 Update s1 SwEdition supported_preview
Debian ≫ Debian Linux Version 8.0
Debian ≫ Debian Linux Version 9.0
Debian ≫ Debian Linux Version 10.0
Fedoraproject ≫ Fedora Version 31
Fedoraproject ≫ Fedora Version 32
Opensuse ≫ Leap Version 15.1
Opensuse ≫ Leap Version 15.2
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition -
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 19.10
Canonical ≫ Ubuntu Linux Version 20.04 SwEdition lts
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 93.42% 0.998
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
ISC 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-617 Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html
Third Party Advisory
Mailing List
https://www.debian.org/security/2020/dsa-4689
Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/05/19/4
Patch
Third Party Advisory
Mailing List
https://lists.debian.org/debian-lts-announce/2020/05/msg00031.html
Third Party Advisory
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JKJXVBOKZ36ER3EUCR7VRB7WGHIIMPNJ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WOGCJS2XQ3SQNF4W6GLZ73LWZJ6ZZWZI/
https://security.netapp.com/advisory/ntap-20200522-0002/
Third Party Advisory
https://usn.ubuntu.com/4365-1/
Third Party Advisory
https://usn.ubuntu.com/4365-2/
Third Party Advisory
http://packetstormsecurity.com/files/157836/BIND-TSIG-Denial-Of-Service.html
Third Party Advisory
VDB Entry
https://kb.isc.org/docs/cve-2020-8617
Patch
Vendor Advisory