6.5

CVE-2020-8622

A truncated TSIG response can lead to an assertion failure

In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, could send a truncated response to that request, triggering an assertion failure, causing the server to exit. Alternately, an off-path attacker would have to correctly guess when a TSIG-signed request was sent, along with other characteristics of the packet and message, and spoof a truncated response to trigger an assertion failure, causing the server to exit.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Isc ≫ Bind Version >= 9.0.0 <= 9.11.21
Isc ≫ Bind Version >= 9.12.0 <= 9.16.5
Isc ≫ Bind Version >= 9.17.0 <= 9.17.3
Isc ≫ Bind Version 9.9.3 Update s1 SwEdition supported_preview
Isc ≫ Bind Version 9.11.21 Update s1 SwEdition supported_preview
Fedoraproject ≫ Fedora Version 31
Fedoraproject ≫ Fedora Version 32
Debian ≫ Debian Linux Version 9.0
Debian ≫ Debian Linux Version 10.0
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition -
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 20.04 SwEdition lts
Opensuse ≫ Leap Version 15.1
Opensuse ≫ Leap Version 15.2
Synology ≫ Dns Server Version < 2.2.2-5028
Oracle ≫ Communications Diameter Signaling Router Version >= 8.0.0 <= 8.5.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.59% 0.921
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
ISC 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-617 Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

https://www.oracle.com/security-alerts/cpuoct2021.html
Patch
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html
Third Party Advisory
Mailing List
https://www.debian.org/security/2020/dsa-4752
Third Party Advisory
https://security.gentoo.org/glsa/202008-19
Third Party Advisory
https://security.netapp.com/advisory/ntap-20200827-0003/
Third Party Advisory
https://usn.ubuntu.com/4468-1/
Third Party Advisory
https://www.synology.com/security/advisory/Synology_SA_20_19
Third Party Advisory
https://kb.isc.org/docs/cve-2020-8622
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2020/08/msg00053.html
Third Party Advisory
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DQN62GBMCIC5AY4KYADGXNKVY6AJKSJE/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKAMJZXR66P6S5LEU4SN7USSNCWTXEXP/
https://usn.ubuntu.com/4468-2/
Third Party Advisory