CVE-2020-8619
In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone contains an empty non-terminal entry containing an asterisk ("*") character, this defect cannot be encountered. A would-be attacker who is allowed to change zone content could theoretically introduce such a record in order to exploit this condition to cause denial of service, though we consider the use of this vector unlikely because any such attack would require a significant privilege level and be easily traceable.
- Isc Bind
- ≤ 9.11.19, 9.11.19-s1, 9.14.12, 9.16.3
- Fix
- Available
- CVSS 3.1
- 4.9 MEDIUM
- EPSS
- 2.1% (80th percentile)
- Weakness
- CWE-404
- NVD status
- Modified
- Published
- 2020-06-17
Fix
Upgrade to the patched release most closely related to your current version of BIND: BIND 9.11.20 BIND 9.16.4 BIND Supported Preview Edition is a special feature preview branch of BIND provided to eligible ISC support customers. BIND 9.11.20-S1
Workaround
None
No indexed exploits for CVE-2020-8619 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2020-8619 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.