CVE-2020-8619: canonical ubuntu_linux Improper Resource Shutdown or Release
Vulnerability summary
CVE-2020-8619 is a medium (CVSS 4.9) Improper Resource Shutdown or Release vulnerability in canonical ubuntu_linux. EPSS estimates a 2.10% chance of exploitation in the next 30 days, higher than 81.4% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 7 · Related 7Timeline
- 17-06-2020PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
In ISC BIND9 versions BIND 9.11.14 -> 9.11.19, BIND 9.14.9 -> 9.14.12, BIND 9.16.0 -> 9.16.3, BIND Supported Preview Edition 9.11.14-S1 -> 9.11.19-S1: Unless a nameserver is providing authoritative service for one or more zones and at least one zone contains an empty non-terminal entry containing an asterisk ("*") character, this defect cannot be encountered. A would-be attacker who is allowed to change zone content could theoretically introduce such a record in order to exploit this condition to cause denial of service, though we consider the use of this vector unlikely because any such attack would require a significant privilege level and be easily traceable.
CVSS metrics
8 scores · 7 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated4.9MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated4.9MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated4.9MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- OSV · WolfiEcosystem advisory · calculated4.9MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- OSV · ChainguardEcosystem advisory · calculated4.9MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- NVDNIST4.9MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
2.10%
Chance of exploitation in the next 30 days
Percentile
81%
Versus all other CVEs
30-day change
0.00 pp
From 2.10% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian2 products
- bind9< 1:9.16.4-1
- debian_linuxEOL10.0
Isc2 products
Alpine1 product
- bind≥ 9.11.14, < 9.16.4-r0
Canonical1 product
- ubuntu_linuxEOL20.04
Chainguard1 product
- bindAll versions (No fix recorded)
Fedoraproject1 product
- fedoraEOL31 | 32
Netapp1 product
Opensuse1 product
- leapEOL15.1 | 15.2
Ubuntu1 product
- bind9< 1:9.16.1-0ubuntu2.2
Wolfi1 product
- bindAll versions (No fix recorded)
10 vendors · 12 products
References
14 links
- lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.htmlVendor AdvisoryX Refsource SUSEAdvisoryMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.htmlVendor AdvisoryX Refsource SUSEAdvisoryMailing ListThird Party Advisory
