CVE-2020-8620

No indexed exploits for CVE-2020-8620 yet

In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing the server to exit.

Affected products: Bind, Bind Server, Linuxmint, Suse, Ubuntu, Libuv
Isc Bind: ≤ 9.16.5, 9.17.3

Fix: Available
CVSS 3.1: 7.5 HIGH
EPSS: 3.7% (89th percentile)
Weakness: CWE-617
NVD status: Modified
Published: 2020-08-21

Fix

Upgrade to the patched release most closely related to your current version of BIND: BIND 9.16.6 BIND 9.17.4

Workaround

No workarounds known.

CVE-2020-8620 at NVD

Authoritative description, scoring and affected products

No exploit for CVE-2020-8620 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.