CVE-2020-8618: Canonical Ubuntu Linux

Medium severity, CVSS 4.9. EPSS: 1.8% chance of exploitation in the next 30 days.

An attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients.

Affected products

• Canonical Ubuntu Linux: version 20.04 only
• ISC BIND: from 9.16.0, up to and including 9.16.3
• Netapp Steelstore Cloud Integrated Storage: affected versions not specified
• Opensuse Leap: version 15.1 only; version 15.2 only

Published 2020-06-17. Last modified 2026-06-17.