Lucene search

K
ibmIBM41DD55069D26FA13088CD8E8D18E8F704C3AADCD95D705EB48D13E576C03B42F
HistoryApr 30, 2021 - 11:06 a.m.

Security Bulletin: Vulnerability in bind affects IBM Integrated Analytics System

2021-04-3011:06:28
www.ibm.com
17

0.004 Low

EPSS

Percentile

74.5%

Summary

Redhat provided bind is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE.

Vulnerability Details

CVEID:CVE-2020-8622
**DESCRIPTION:**ISC BIND is vulnerable to a denial of service, caused by an assertion failure when attempting to verify a truncated response to a TSIG-signed request. By sending a specially-crafted request, a remote authenticated attacker could exploit this vulnerability to cause the server to exit.
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/187060 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Integrated Analytics System 1.0.0-1.0.24.0

Remediation/Fixes

Product VRMF Remediation / First Fix
IBM Integrated Analytics System 1.0.25.0 Link To Fix Central

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm integrated analytics systemeqany