DeutschShown in its original language — a full translation is planned for a future version.
Internet Systems Consortium BIND: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2020-05-18
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um einen Denial of Service Angriff durchzuführen oder sonstige Auswirkungen zu verursachen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-8617US | medium5.9 | Exploit | ||
Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG… | ||||
| CVE-2020-8616US | high8.6 | — | ||
A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafte… | ||||
02
references
External citations — patches, advisories, analysis.
- CentOS Security Advisory CESA-2020:2344 vom 2020-06-01external
- CentOS Security Advisory CESA-2020:2383 vom 2020-06-04external
- Juniper Security Advisory JSA11090 vom 2021-01-13external
- Juniper Security Advisory JSA11091 vom 2021-01-13external
- SUSE Security Update SUSE-SU-2020:1914-1 vom 2020-07-15external
- SUSE Security Update SUSE-SU-2020:14400-1 vom 2020-06-19external
- SUSE Security Update SUSE-SU-2020:2914-1 vom 2020-10-13external
- SUSE Security Update SUSE-SU-2020:2947-1 vom 2020-10-21external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan