CVE-2020-8624: Canonical Ubuntu Linux

Medium severity, CVSS 4.3. EPSS: 3.7% chance of exploitation in the next 30 days.

In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset of the zone's content could abuse these unintended additional privileges to update other contents of the zone.

Affected products

• Canonical Ubuntu Linux: version 16.04 only; version 18.04 only; version 20.04 only
• Debian Debian Linux: version 10.0 only
• Fedoraproject Fedora: version 31 only; version 32 only
• ISC BIND: from 9.9.12, up to and including 9.9.13; from 9.10.7, up to and including 9.10.8; from 9.11.3, up to and including 9.11.21; from 9.12.1, up to and including 9.16.5; from 9.17.0, up to and including 9.17.3; version 9.9.12 only; …
• Netapp Steelstore Cloud Integrated Storage: affected versions not specified
• Opensuse Leap: version 15.1 only; version 15.2 only

Published 2020-08-21. Last modified 2026-06-17.