The vulnerability of the Bind9 DNS-server implementation with the “--enable-native-pkcs11” option allows a attacker to cause a service failure.

🗓️ 30 Mar 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Bind9 vulnerability with --enable-native-pkcs11 enables service failures via RSA-signed, crafted DNS queries.

Reporter	Title	Published	Views	Family All 156
ALT Linux	Security fix for the ALT Linux 10 package bind version 9.11.22-alt1	21 Aug 202000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package bind version 9.11.22-alt1	26 Aug 202000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package bind version 9.10.8.P1-alt3	24 Aug 202000:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Vulnerability in bind affects IBM Integrated Analytics System	30 Apr 202111:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by multiple BIND vulnerabilities (CVE-2020-8622, CVE-2020-8623, CVE-2020-8624)	17 Feb 202110:09	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in BIND affect Power Hardware Management Console (CVE-2020-8622, CVE-2020-8623 and CVE-2020-8624)	22 Sep 202123:38	–	ibm
Tenable Nessus	Amazon Linux 2 : bind (ALAS-2020-1564)	9 Dec 202000:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0025: bind (ALINUX3-SA-2021:0025)	14 May 202500:00	–	nessus
Tenable Nessus	ISC BIND 9.10.x < 9.11.22, 9.12.x < 9.16.6, 9.17.x < 9.17.4 DoS	27 Aug 202000:00	–	nessus
Tenable Nessus	CentOS 7 : bind (RHSA-2020:5011)	18 Nov 202000:00	–	nessus

Vulners

Node

internet_systems_consortium bindRange9.10.0–9.11.21

OR

internet_systems_consortium bindRange9.12.1–9.16.5

OR

internet_systems_consortium bindRange9.17.0–9.17.3

OR

novell opensuse_leapMatch15.1

OR

fedora fedoraMatch31

OR

fedora fedoraMatch32

OR

novell opensuse_leapMatch15.2

Source	Link
kb	www.kb.isc.org/docs/cve-2020-8623
lists	www.lists.debian.org/debian-lts-announce/2020/08/msg00053.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/DQN62GBMCIC5AY4KYADGXNKVY6AJKSJE/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ZKAMJZXR66P6S5LEU4SN7USSNCWTXEXP/
lists	www.lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-8623
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-8623
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
ubuntu	www.ubuntu.com/security/notices/USN-4468-1

16 Sep 2024 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.3

CVSS 35.3

EPSS0.06348

bind nine privilege management rsa keys dns queries denial of service