Threat Encyclopedia

ISC.BIND.DNS.GSS-TSIG.SPNEGO.GSSAPI.Token.DoS

description-logoDescription

This indicates an attack attempt to exploit a Denial of Service Vulnerability in ISC Bind.
This vulnerability is due to improper input validation for incoming DNS message. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted DNS packet to the target server. Successfully exploiting this vulnerability could result in denial of service.

affected-products-logoAffected Products

ISC Bind version 9.5.0 to 9.11.27
ISC Bind version 9.12.0 to 9.16.11
ISC Bind version 9.17.0 to 9.17.1
ISC Bind version 9.11.3-S1 to 9.11.27-S1
ISC Bind version 9.16.8-S1 to 9.16.11-S1
Siemens SINEC Infrastructure Network Service version 1.0.1.0 and prior

Impact logoImpact

Denial of Service: Remote attackers can crash vulnerable systems.

recomended-action-logoRecommended Actions

Apply the latest update or patch from the vendor.
https://www.isc.org/download/

CVE References

CVE-2020-8625

Telemetry logoTelemetry