CVE-2020-8622A truncated TSIG response can lead to an assertion failure

Beschreibung

In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, could send a truncated response to that request, triggering an assertion failure, causing the server to exit. Alternately, an off-path attacker would have to correctly guess when a TSIG-signed request was sent, along with other characteristics of the packet and message, and spoof a truncated response to trigger an assertion failure, causing the server to exit.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://kb.isc.org/docs/cve-2020-8622
• FEDORA-2020-a02b7a0f21 vendor-advisory
• USN-4468-1 vendor-advisory
• USN-4468-2 vendor-advisory
• DSA-4752 vendor-advisory
• FEDORA-2020-14c194e5af vendor-advisory
• [debian-lts-announce] 20200829 [SECURITY] [DLA 2355-1] bind9 security update mailing-list
• GLSA-202008-19 vendor-advisory
• openSUSE-SU-2020:1699 vendor-advisory
• openSUSE-SU-2020:1701 vendor-advisory
• https://www.oracle.com/security-alerts/cpuoct2021.html
• https://security.netapp.com/advisory/ntap-20200827-0003/
• https://www.synology.com/security/advisory/Synology_SA_20_19