Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: ISC BIND9 — GLSA-202008-19 Clear all filters
TI-2020-06917 CVE-2020-8624 · GHSA-qgv6-6x66-mr9j

update-policy rules of type "subdomain" are enforced incorrectly

Priority LOW 27

In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0382 Published 2020-08-21 Fixed in 9.11.22, 9.16.6 +2 CWE-269
TI-2020-06916 CVE-2020-8623 · GHSA-3hh5-h95j-2cw7

A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c

Priority MEDIUM 42

In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query p…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06606 Published 2020-08-21 Fixed in 9.11.22, 9.16.6 +1 CWE-617
TI-2020-06915 CVE-2020-8622 · GHSA-fh6r-7j2f-pmw4

A truncated TSIG response can lead to an assertion failure

Priority LOW 38

In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the serve…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.05904 Published 2020-08-21 Partial fix · 9.11.22, 9.16.6 +1 CWE-617
TI-2020-06913 CVE-2020-8620 · GHSA-p5fp-cw6q-m6xc

Reachable assertion in ISC BIND9

Priority LOW 39

In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing the server to exit.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03902 Published 2020-08-21 No fix listed CWE-617