CVE-2020-8623: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 6.4% chance of exploitation in the next 30 days.

In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulnerable, the system must: * be running BIND that was built with "--enable-native-pkcs11" * be signing one or more zones with an RSA key * be able to receive queries from a possible attacker

Affected products

• Canonical Ubuntu Linux: version 16.04 only; version 18.04 only; version 20.04 only
• Debian Debian Linux: version 9.0 only; version 10.0 only
• Fedoraproject Fedora: version 31 only; version 32 only
• ISC BIND: from 9.10.0, up to and including 9.11.21; from 9.12.1, up to and including 9.16.5; from 9.17.0, up to and including 9.17.3; version 9.10.5 only; version 9.11.21 only
• Netapp Steelstore Cloud Integrated Storage: affected versions not specified
• Opensuse Leap: version 15.1 only; version 15.2 only
• Synology DNS Server: before 2.2.2-5027 (fixed in 2.2.2-5027)

Published 2020-08-21. Last modified 2026-06-17.