Vulnerabilities > CVE-2020-8623 - Reachable Assertion vulnerability in multiple products

In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulnerable, the system must: * be running BIND that was built with "--enable-native-pkcs11" * be signing one or more zones with an RSA key * be able to receive queries from a possible attacker

Vulnerable Configurations

Part	Description	Count
Application	Isc ISC Bind 9.17.0 ISC Bind 9.17.1 ISC Bind 9.17.2 ISC Bind 9.17.3 ISC Bind 9.12.1 ISC Bind 9.12.2 ISC Bind 9.12.3 ISC Bind 9.12.4 ISC Bind 9.13.0 ISC Bind 9.13.1 ISC Bind 9.13.2 ISC Bind 9.13.3 ISC Bind 9.13.4 ISC Bind 9.13.5 ISC Bind 9.13.6 ISC Bind 9.13.7 ISC Bind 9.14.0 ISC Bind 9.14.1 ISC Bind 9.14.2 ISC Bind 9.14.3 ISC Bind 9.14.4 ISC Bind 9.14.5 ISC Bind 9.14.6 ISC Bind 9.14.7 ISC Bind 9.14.8 ISC Bind 9.14.9 ISC Bind 9.14.11 ISC Bind 9.14.12 ISC Bind 9.15.0 ISC Bind 9.15.1 ISC Bind 9.15.2 ISC Bind 9.15.3 ISC Bind 9.15.4 ISC Bind 9.15.5 ISC Bind 9.15.6 ISC Bind 9.16.0 ISC Bind 9.16.1 ISC Bind 9.16.2 ISC Bind 9.16.3 ISC Bind 9.16.4 ISC Bind 9.16.5 ISC Bind 9.10.0 ISC Bind 9.10.1 ISC Bind 9.10.2 ISC Bind 9.10.3 ISC Bind 9.10.4 ISC Bind 9.10.5 ISC Bind 9.10.6 ISC Bind 9.10.7 ISC Bind 9.10.8 ISC Bind 9.11.0 ISC Bind 9.11.1 ISC Bind 9.11.2 ISC Bind 9.11.3 ISC Bind 9.11.4 ISC Bind 9.11.5 ISC Bind 9.11.6 ISC Bind 9.11.7 ISC Bind 9.11.8 ISC Bind 9.11.9 ISC Bind 9.11.10 ISC Bind 9.11.11 ISC Bind 9.11.12 ISC Bind 9.11.14 ISC Bind 9.11.14-S1 ISC Bind 9.11.18 ISC Bind 9.11.19 ISC Bind 9.11.19-S1 ISC Bind 9.11.20 ISC Bind 9.11.21	244
Application	Synology Synology DNS Server - Synology DNS Server 1.0-0017 Synology DNS Server 1.0-0019 Synology DNS Server 1.0-0027 Synology DNS Server 1.0-0028 Synology DNS Server 1.1-0052 Synology DNS Server 1.1-0053 Synology DNS Server 1.1-0058 Synology DNS Server 1.1-0059 Synology DNS Server 1.1-0064 Synology DNS Server 1.1-0066 Synology DNS Server 1.1-0068 Synology DNS Server 1.1-0070 Synology DNS Server 1.1-0075 Synology DNS Server 1.1-0077 Synology DNS Server 1.1-0080 Synology DNS Server 1.1-0083 Synology DNS Server 1.1-0084 Synology DNS Server 1.1-0088 Synology DNS Server 1.1-0090 Synology DNS Server 1.1-0091 Synology DNS Server 1.1-0093 Synology DNS Server 1.1-0094 Synology DNS Server 1.1-0113 Synology DNS Server 1.1-0119 Synology DNS Server 1.1-0123 Synology DNS Server 1.1-0124 Synology DNS Server 1.1-0301 Synology DNS Server 1.1-0302 Synology DNS Server 1.1-0304 Synology DNS Server 1.1-0307 Synology DNS Server 1.2-1002 Synology DNS Server 1.2.0-0129 Synology DNS Server 1.2.0-0130 Synology DNS Server 2.2.0-3032 Synology DNS Server 2.2.1-3042 Synology DNS Server 2.2.1-3050 Synology DNS Server 2.2.1-3051 Synology DNS Server 2.2.1-3062 Synology DNS Server 2.2.1-3079 Synology DNS Server 2.2.1-5009 Synology DNS Server 2.2.1-5010 Synology DNS Server 2.2.1-5012 Synology DNS Server 2.2.1-5014	44
Application	Netapp Netapp Steelstore Cloud Integrated Storage -	1
OS	Fedoraproject Fedoraproject Fedora 31 Fedoraproject Fedora 32	2
OS	Opensuse Opensuse Leap 15.1 Opensuse Leap 15.2	2
OS	Debian Debian Debian Linux 9.0 Debian Debian Linux 10.0	2
OS	Canonical Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 16.04	3

Common Weakness Enumeration (CWE)

CWE-617 - Reachable Assertion

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References