CVE-2020-8621
In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward only' are not affected.
- Affected products
- Bind, Bind Server, Linuxmint, Suse, Ubuntu
- Isc Bind
- ≤ 9.16.5, 9.17.3
- Fix
- Available
- CVSS 3.1
- 7.5 HIGH
- EPSS
- 3.0% (86th percentile)
- Weakness
- CWE-617
- NVD status
- Modified
- Published
- 2020-08-21
Fix
Upgrade to the patched release most closely related to your current version of BIND: BIND 9.16.6 BIND 9.17.4
Workaround
No workarounds known.
CVE-2020-8621 at NVD
No indexed exploits for CVE-2020-8621 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2020-8621 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.