Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2020-8624

update-policy rules of type "subdomain" are enforced incorrectly

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
isc

Description

In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset of the zone's content could abuse these unintended additional privileges to update other contents of the zone.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ISC BIND9

  • 9.9.12 to < unspecifiedaffected
  • unspecified to ≤ 9.9.13affected
  • 9.10.7 to < unspecifiedaffected
  • unspecified to ≤ 9.10.8affected
  • 9.11.3 to < unspecifiedaffected
  • unspecified to < 9.11.22affected
  • 9.12.1 to < unspecifiedaffected
  • unspecified to < 9.16.6affected
  • 9.17.0 to < unspecifiedaffected
  • unspecified to < 9.17.4affected
  • 9.9.12-S1 to < unspecifiedaffected
  • unspecified to ≤ 9.9.13-S1affected
  • 9.11.3-S1 to < unspecifiedaffected
  • unspecified to < 9.11.22-S1affected

References