CVE-2020-8624

Name
CVE-2020-8624
Description
In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset of the zone's content could abuse these unintended additional privileges to update other contents of the zone.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Vendor Advisory https://kb.isc.org/docs/cve-2020-8624
Third Party Advisory https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DQN62GBMCIC5AY4KYADGXNKVY6AJKSJE/
CONFIRM https://security.netapp.com/advisory/ntap-20200827-0003/
UBUNTU https://usn.ubuntu.com/4468-1/
DEBIAN https://www.debian.org/security/2020/dsa-4752
FEDORA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKAMJZXR66P6S5LEU4SN7USSNCWTXEXP/
GENTOO https://security.gentoo.org/glsa/202008-19
CONFIRM https://www.synology.com/security/advisory/Synology_SA_20_19
SUSE http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html
SUSE http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* bind >= 9.9.12 <= 9.9.13
cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* bind >= 9.10.7 <= 9.10.8
cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* bind >= 9.11.3 <= 9.11.21
cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* bind >= 9.12.1 <= 9.16.5
cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* bind >= 9.17.0 <= 9.17.3

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
bind edge-main 9.16.6-r0 None fixed
bind edge-main 9.16.4-r0 None possibly vulnerable
bind edge-main 9.14.12-r0 None possibly vulnerable
bind edge-main 9.14.8-r0 None possibly vulnerable
bind edge-main 9.14.7-r0 None possibly vulnerable
bind edge-main 9.14.4-r0 None possibly vulnerable
bind edge-main 9.14.1-r0 None possibly vulnerable
bind edge-main 9.12.3_p4-r0 None possibly vulnerable
bind edge-main 9.12.2_p1-r0 None possibly vulnerable
bind edge-main 9.12.1_p2-r0 None possibly vulnerable
bind 3.22-main 9.16.6-r0 None fixed
bind 3.22-main 9.16.4-r0 None possibly vulnerable
bind 3.22-main 9.14.12-r0 None possibly vulnerable
bind 3.22-main 9.14.8-r0 None possibly vulnerable
bind 3.22-main 9.14.7-r0 None possibly vulnerable
bind 3.22-main 9.14.4-r0 None possibly vulnerable
bind 3.22-main 9.14.1-r0 None possibly vulnerable
bind 3.22-main 9.12.3_p4-r0 None possibly vulnerable
bind 3.22-main 9.12.2_p1-r0 None possibly vulnerable
bind 3.22-main 9.12.1_p2-r0 None possibly vulnerable
bind 3.21-main 9.16.6-r0 None fixed
bind 3.21-main 9.16.4-r0 None possibly vulnerable
bind 3.21-main 9.14.12-r0 None possibly vulnerable
bind 3.21-main 9.14.8-r0 None possibly vulnerable
bind 3.21-main 9.14.7-r0 None possibly vulnerable
bind 3.21-main 9.14.4-r0 None possibly vulnerable
bind 3.21-main 9.14.1-r0 None possibly vulnerable
bind 3.21-main 9.12.3_p4-r0 None possibly vulnerable
bind 3.21-main 9.12.2_p1-r0 None possibly vulnerable
bind 3.21-main 9.12.1_p2-r0 None possibly vulnerable
bind 3.20-main 9.16.6-r0 None fixed
bind 3.20-main 9.16.4-r0 None possibly vulnerable
bind 3.20-main 9.14.12-r0 None possibly vulnerable
bind 3.20-main 9.14.8-r0 None possibly vulnerable
bind 3.20-main 9.14.7-r0 None possibly vulnerable
bind 3.20-main 9.14.4-r0 None possibly vulnerable
bind 3.20-main 9.14.1-r0 None possibly vulnerable
bind 3.20-main 9.12.3_p4-r0 None possibly vulnerable
bind 3.20-main 9.12.2_p1-r0 None possibly vulnerable
bind 3.20-main 9.12.1_p2-r0 None possibly vulnerable
bind 3.19-main 9.16.6-r0 None fixed
bind 3.19-main 9.16.4-r0 None possibly vulnerable
bind 3.19-main 9.14.12-r0 None possibly vulnerable
bind 3.19-main 9.14.8-r0 None possibly vulnerable
bind 3.19-main 9.14.7-r0 None possibly vulnerable
bind 3.19-main 9.14.4-r0 None possibly vulnerable
bind 3.19-main 9.14.1-r0 None possibly vulnerable
bind 3.19-main 9.12.3_p4-r0 None possibly vulnerable
bind 3.19-main 9.12.2_p1-r0 None possibly vulnerable
bind 3.19-main 9.12.1_p2-r0 None possibly vulnerable
bind 3.18-main 9.16.6-r0 None fixed
bind 3.17-main 9.16.6-r0 None fixed
bind 3.12-main 9.16.6-r0 None fixed
bind 3.11-main 9.16.6-r0 None fixed
bind 3.11-main 9.14.12-r1 None fixed
bind 3.10-main 9.16.6-r0 None fixed
bind 3.10-main 9.14.12-r1 tcely <bind+aports@tcely.33mail.com> fixed