CVE-2020-8621

Description

In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and forward first then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that forward only are not affected.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

4.224

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in BIND 9.17.1	Windows
Internet Domain Name Server (USN-4468-1) bind9_9.16.1-0ubuntu2.3_i386.deb	Linux
Internet Domain Name Server (USN-4468-1) bind9_9.16.1-0ubuntu2.3_amd64.deb	Linux
Internet Domain Name Server (USN-4468-1) bind9_9.11.3+dfsg-1ubuntu1.13_i386.deb	Linux
Internet Domain Name Server (USN-4468-1) bind9_9.11.3+dfsg-1ubuntu1.13_amd64.deb	Linux
Internet Domain Name Server (USN-4468-1) bind9_9.10.3.dfsg.P4-8ubuntu1.17_i386.deb	Linux
Internet Domain Name Server (USN-4468-1) bind9_9.10.3.dfsg.P4-8ubuntu1.17_amd64.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234