1. Home
  2. Vulnerabilities
  3. CVE-2020-8624

CVE-2020-8624

CVSS v3.1 4.3 (Medium)
43% Progress
CVSS v2.0 4 (Medium)
40% Progress
EPSS 0.28 % (69th)
0.28% Progress
Affected Products 6
Advisories 16
Info CVSS EPSS CAPEC Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset of the zone's content could abuse these unintended additional privileges to update other contents of the zone.

Weaknesses
CWE-269
Improper Privilege Management
CVE Status
PUBLISHED
CNA
Internet Systems Consortium (ISC)
Published Date
2020-08-21 21:15:12
(4 years ago)
Updated Date
2023-11-07 03:26:38
(10 months ago)

Affected Products

Canonical

Debian

Fedoraproject

Isc

Netapp

Opensuse

Configuration #1

    CPE23 From Up To
  Isc Bind from 9.9.12 version and 9.9.13 and prior versions cpe:2.3:a:isc:bind >= 9.9.12 <= 9.9.13
  Isc Bind from 9.10.7 version and 9.10.8 and prior versions cpe:2.3:a:isc:bind >= 9.10.7 <= 9.10.8
  Isc Bind from 9.11.3 version and 9.11.21 and prior versions cpe:2.3:a:isc:bind >= 9.11.3 <= 9.11.21
  Isc Bind from 9.12.1 version and 9.16.5 and prior versions cpe:2.3:a:isc:bind >= 9.12.1 <= 9.16.5
  Isc Bind from 9.17.0 version and 9.17.3 and prior versions cpe:2.3:a:isc:bind >= 9.17.0 <= 9.17.3

Configuration #2

    CPE23 From Up To
  Isc Bind 9.9.12 S1 cpe:2.3:a:isc:bind:9.9.12:s1:*:*:supported_preview
  Isc Bind 9.9.13 S1 cpe:2.3:a:isc:bind:9.9.13:s1:*:*:supported_preview
  Isc Bind 9.11.3 S1 cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview
  Isc Bind 9.11.21 S1 cpe:2.3:a:isc:bind:9.11.21:s1:*:*:supported_preview

Configuration #3

    CPE23 From Up To
  Netapp Steelstore Cloud Integrated Storage cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-
  Canonical Ubuntu Linux 16.04 cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm
  Canonical Ubuntu Linux 18.04 cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts
  Canonical Ubuntu Linux 20.04 cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts
  Debian Linux 10.0 cpe:2.3:o:debian:debian_linux:10.0
  Fedoraproject Fedora 31 cpe:2.3:o:fedoraproject:fedora:31
  Fedoraproject Fedora 32 cpe:2.3:o:fedoraproject:fedora:32

Configuration #4

    CPE23 From Up To
  Opensuse Leap 15.1 cpe:2.3:o:opensuse:leap:15.1
  Opensuse Leap 15.2 cpe:2.3:o:opensuse:leap:15.2