CVE-2020-8620: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

In BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing the server to exit.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 16.04 only; version 18.04 only
• ISC BIND: from 9.15.6, up to and including 9.16.5; from 9.17.0, up to and including 9.17.3; version 9.9.12 only; version 9.9.13 only; version 9.11.3 only; version 9.11.21 only
• Netapp Steelstore Cloud Integrated Storage: affected versions not specified
• Opensuse Leap: version 15.1 only; version 15.2 only

Published 2020-08-21. Last modified 2026-06-17.