Veracode Vulnerability DatabaseVERACODE:26532Denial Of Service (DoS)
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
bind is vulnerable to denial of service (DoS). The vulnerability exists when a server is configured with both QNAME minimization and ‘forward first’, and a user who can send queries to it may be able to trigger the condition that will cause the server to crash.
References
lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html
lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html
kb.isc.org/docs/cve-2020-8621
security.gentoo.org/glsa/202008-19
security.netapp.com/advisory/ntap-20200827-0003/
usn.ubuntu.com/4468-1/
www.synology.com/security/advisory/Synology_SA_20_19
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P