This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2020-8621 →
DEBIAN-CVE-2020-8621
In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send q...
Original description
The description as published by the source.
In BIND 9.14.0 -> 9.16.5, 9.17.0 -> 9.17.3, If a server is configured with both QNAME minimization and 'forward first' then an attacker who can send queries to it may be able to trigger the condition that will cause the server to crash. Servers that 'forward only' are not affected.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
bind9
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.16.6-1"}]}]
Debian:13
bind9
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.16.6-1"}]}]
Debian:14
bind9
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.16.6-1"}]}]
References
- advisory security-tracker.debian.org