ZeroHour

CVE-2020-8620

CVSS 3.1
7.5 high
EPSS
4%p89
Published
()
Modified
Description

In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing the server to exit.

Vendors
iscopensusenetappcanonical
Products
bind, leap, steelstore cloud integrated storage, ubuntu linux
Weakness
CWE-617
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news