In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing the server to exit.
{
"versions": [
{
"introduced": "9.15.6"
},
{
"last_affected": "9.16.5"
},
{
"introduced": "9.17.0"
},
{
"last_affected": "9.17.3"
},
{
"introduced": "0"
},
{
"last_affected": "9.9.12-s1"
},
{
"introduced": "0"
},
{
"last_affected": "9.11.3-s1"
}
]
}[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.9.13-s1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.11.21-s1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "16.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "18.04"
}
]
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8620.json"