VDB
CVE-2020-8621
CVE-2020-8621
PUBLISHED
In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward only' are not affected.
EPSS 4.88% · 89.8th percentile
Risk Scores
EPSS Score
4.88%
89.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:20.04:LTS | bind9 | 0, 1:9.11.5.P4+dfsg-5.1ubuntu3, 1:9.11.5.P4+dfsg-5.1ubuntu4 |
Exploit Intelligence
- https://kb.isc.org/docs/cve-2020-8621 (circl)
- https://security.netapp.com/advisory/ntap-20200827-0003/ (circl)
- USN-4468-1 (circl)
- GLSA-202008-19 (circl)
- https://www.synology.com/security/advisory/Synology_SA_20_19 (circl)
- openSUSE-SU-2020:1699 (circl)
- openSUSE-SU-2020:1701 (circl)
Timeline
- Aug 20, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Jan 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 13, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2020-8621 third-party-advisory
- https://kb.isc.org/docs/cve-2020-8621 third-party-advisory
- https://ubuntu.com/security/notices/USN-4468-1 vendor-advisory
- https://www.cve.org/CVERecord?id=CVE-2020-8621 third-party-advisory