Description
In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing the server to exit.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ISC BIND9
9.15.6 to < *affected
References
- https://kb.isc.org/docs/cve-2020-8620 ↗
- https://security.netapp.com/advisory/ntap-20200827-0003/ ↗
- https://usn.ubuntu.com/4468-1/ ↗
- https://security.gentoo.org/glsa/202008-19 ↗
- https://www.synology.com/security/advisory/Synology_SA_20_19 ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html ↗