PT-2020-6022 · Isc+5 · Bind+5

Emanuel Almeida · Published 2020-08-20 · Updated 2024-06-15 · CVE-2020-8620

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions BIND versions 9.15.6 through 9.16.5 BIND versions 9.17.0 through 9.17.3

Description The issue is related to the libuv library in the BIND DNS server, which can be exploited by an attacker who can establish a TCP connection with the server and send data on that connection, causing the server to exit due to an assertion failure. This can be triggered by sending a specific set of packets to the TCP port on which the BIND server accepts connections, including large AXFR requests that can cause the libuv library to pass a size to the server that triggers the assertion check and process termination.

Recommendations For BIND versions 9.15.6 through 9.16.5, update to version 9.16.6 or later. For BIND versions 9.17.0 through 9.17.3, update to version 9.17.4 or later. As a temporary workaround, consider restricting access to the TCP port on which the BIND server accepts connections to minimize the risk of exploitation.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

BDU:2021-02674

CVE-2020-8620

OPENSUSE-SU-2020:1699-1

OPENSUSE-SU-2020:1701-1

OPENSUSE-SU-2020_1699-1

OPENSUSE-SU-2020_1701-1

OPENSUSE-SU-2024:10650-1

SUSE-SU-2020:2914-1

USN-4468-1

Affected Products

Bind

Bind Server

Linuxmint

Suse

Ubuntu

Libuv

References · 90

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/dns/bind_tsig_badtime.rb · Exploit
• 🔥 https://github.com/knqyf263/CVE-2020-8617 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2020:1699-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4468-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8620 · Security Note
• https://ubuntu.com/security/CVE-2020-8622 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-8620 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html · Vendor Advisory
• https://usn.ubuntu.com/4468-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-8620 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1701-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2914-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-02674 · Security Note
• https://cve.org/CVERecord?id=CVE-2020-8620 · Security Note
• https://security.gentoo.org/glsa/202008-19 · Vendor Advisory