CVE-2020-8623

No indexed exploits for CVE-2020-8623 yet

In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulnerable, the system must: * be running BIND that was built with "--enable-native-pkcs11" * be signing one or more zones with an RSA key * be able to receive queries from a possible attacker

Affected products: Alt Linux, Bind, Bind Server, Centos, Linuxmint, Red Hat, Suse, Ubuntu
Isc Bind: ≤ 9.11.21, 9.16.5, 9.17.3

Fix: Available
CVSS 3.1: 7.5 HIGH
EPSS: 6.4% (93th percentile)
Weakness: CWE-617
NVD status: Modified
Published: 2020-08-21

Fix

Upgrade to the patched release most closely related to your current version of BIND: BIND 9.11.22 BIND 9.16.6 BIND 9.17.4 BIND Supported Preview Edition is a special feature preview branch of BIND provided to eligible ISC support customers. BIND 9.11.22-S1

Workaround

No workarounds known.

CVE-2020-8623 at NVD

Authoritative description, scoring and affected products

No exploit for CVE-2020-8623 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.