A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c (ISC BIND9)
En bref
- Source
- NVD
- EPSS
- EPSS 93.33 % · centile 100 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- isc
- Statut NVD
- Modified
Rechercher sur…
Description
Using a specially-crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. In releases of BIND dating from March 2018 and after, an assertion check in tsig.c detects this inconsistent state and deliberately exits. Prior to the introduction of the check the server would continue operating in an inconsistent state, with potentially harmful results.
Faiblesses (CWE)
- CWE-617 — Assertion atteignable
Références
- https://kb.isc.org/docs/cve-2020-8617
- http://www.openwall.com/lists/oss-security/2020/05/19/4
- https://www.debian.org/security/2020/dsa-4689
- https://security.netapp.com/advisory/ntap-20200522-0002/
- http://packetstormsecurity.com/files/157836/BIND-TSIG-Denial-Of-Service.html
- https://usn.ubuntu.com/4365-2/
- https://usn.ubuntu.com/4365-1/
- https://lists.debian.org/debian-lts-announce/2020/05/msg00031.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WOGCJS2XQ3SQNF4W6GLZ73LWZJ6ZZWZI/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JKJXVBOKZ36ER3EUCR7VRB7WGHIIMPNJ/
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | isc |
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · security-officer@isc.org (Secondary) |
| CVSS 3.1 | MEDIUM 5.9 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 4.3 | AV:N/AC:M/Au:N/C:N/I:N/A:P | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2020-29465
- GCVE · GCVE-0-2020-8617
Avis du CERT-FR
- CERTFR-2022-AVI-650 — Multiples vulnérabilités dans les produits Juniper · cert.ssi.gouv.fr
- CERTFR-2021-AVI-791 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
- CERTFR-2021-AVI-033 — Multiples vulnérabilités dans les produits Juniper · cert.ssi.gouv.fr
- CERTFR-2020-AVI-302 — Multiples vulnérabilités dans Bind · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*≥ 9.0.0 ≤ 9.11.18cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*≥ 9.12.0 ≤ 9.12.4cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*≥ 9.13.0 ≤ 9.13.7cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*≥ 9.14.0 ≤ 9.14.11cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*≥ 9.15.0 ≤ 9.15.6cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*≥ 9.16.0 ≤ 9.16.2cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*≥ 9.17.0 ≤ 9.17.1cpe:2.3:a:isc:bind:9.12.4:p1:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.12.4:p2:*:*:*:*:*:*cpe:2.3:a:isc:bind:9.9.3:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.10.5:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.10.7:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.5:s3:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.5:s5:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.8:s1:*:*:supported_preview:*:*:*cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| ISC · BIND9 | affected 9.0.0 -> 9.11.18, 9.12.0 -> 9.12.4-P2, 9.14.0 -> 9.14.11, 9.16.0 -> 9.16.2, and releases 9.17.0 -> 9.17.1 of the 9.17 experimental development branch. All releases in the obsolete 9.13 and 9.15 development branches. All releases of BIND Supported Preview Edition from 9.9.3-S1 -> 9.11.18-S1 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |