PT-2020-2158 · Isc · Bind

Published 2020-04-08 · Updated 2020-04-08

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions BIND (affected versions not specified)

Description The issue is related to a configuration vulnerability in the forwarders directive of the BIND DNS server, which is associated with a data protection mechanism breach. Exploitation of this issue may allow a remote attacker to perform a DNS Rebinding attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

BDU:2020-02062

Affected Products

Bind

References · 4

• https://bdu.fstec.ru/vul/2020-02062 · Security Note
• https://github.com/isc-projects/bind9/commit/20f70f24ee6720e1de80a6f10d9a33fc290ed3ed · Note
• https://opennet.ru/opennews/art.shtml?num=52760 · Note
• https://redos.red-soft.ru/updatesec · Note