CVE-2020-8618 MEDIUM

CVE-2020-8618: A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer

Vendor Isc
Product BIND9
Published June 17, 2020
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

4.9/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients.

Key dates

02Disclosure timeline

June 17, 2020 CVE published
September 16, 2024 Record updated