The vulnerability of the Bind9 DNS server package arises from errors in processing “update-policy” rules of the “subdomain” type. This allows attackers to update all parts of the DNS zone along with the subdomain for which an update is scheduled.

🗓️ 30 Mar 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Bind9 vulnerability allows attackers to update entire DNS zone via subdomain update-policy rules.

Reporter	Title	Published	Views	Family All 139
ALT Linux	Security fix for the ALT Linux 10 package bind version 9.11.22-alt1	21 Aug 202000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package bind version 9.11.22-alt1	26 Aug 202000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package bind version 9.10.8.P1-alt3	24 Aug 202000:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Vulnerability in bind affects IBM Integrated Analytics System	30 Apr 202111:21	–	ibm
IBM Security Bulletins	Security Bulletin: BIND for IBM i is affected by CVE-2020-8622 and CVE-2020-8624	20 Oct 202018:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by multiple BIND vulnerabilities (CVE-2020-8622, CVE-2020-8623, CVE-2020-8624)	17 Feb 202110:09	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in BIND affect Power Hardware Management Console (CVE-2020-8622, CVE-2020-8623 and CVE-2020-8624)	22 Sep 202123:38	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
Tenable Nessus	Amazon Linux 2 : bind (ALAS-2020-1564)	9 Dec 202000:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0025: bind (ALINUX3-SA-2021:0025)	14 May 202500:00	–	nessus

Vulners

Node

internet_systems_consortium bindRange9.12.1–9.16.5

OR

internet_systems_consortium bindRange9.17.0–9.17.3

OR

internet_systems_consortium bindRange9.10.7–9.10.8

OR

internet_systems_consortium bindRange9.11.3–9.11.21

OR

internet_systems_consortium bindRange9.9.12–9.9.13

OR

novell opensuse_leapMatch15.1

OR

fedora fedoraMatch31

OR

fedora fedoraMatch32

OR

novell opensuse_leapMatch15.2

Source	Link
kb	www.kb.isc.org/docs/cve-2020-8624
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/DQN62GBMCIC5AY4KYADGXNKVY6AJKSJE/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ZKAMJZXR66P6S5LEU4SN7USSNCWTXEXP/
lists	www.lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-8624
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-8624
ubuntu	www.ubuntu.com/security/notices/USN-4468-1
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16
debian	www.debian.org/security/2020/dsa-4752

16 Sep 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24

CVSS 34.3

EPSS0.0364

domain name system update policy subdomain type zone update zoneub rule