Permissions, Privileges, and Access Controls in ISC BIND - CVE-2020-8624

Vulnerability identifier: #VU45817

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-8624

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to perform unauthorized actions.

The vulnerability exists due to change 4885 in BIND inadvertently caused "update-policy" rules of type "subdomain" to be treated as if they were of type "zonesub", allowing updates to all parts of the zone along with the intended subdomain. A remote user with privileges to change a specific subset of the zone's content could abuse these unintended additional privileges to update other contents of the zone.

ISC BIND
Gentoo Linux
Anolis OS
CentOS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for Power, big endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Slackware Linux
Opensuse
Ubuntu
openEuler
Fedora
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
bind (Red Hat package) main
bind (Alpine package)
bind9 (Debian package)
bind9 (Ubuntu package)
dnsperf
bind-license
bind
bind-utils
bind-sdb-chroot
bind-sdb
bind-pkcs11-utils
bind-pkcs11-libs
bind-pkcs11-devel
bind-pkcs11
bind-lite-devel
bind-libs-lite
bind-libs
bind-export-libs
bind-export-devel
bind-devel
bind-chroot
python3-bind
bind-debuginfo
bind-debugsource
bind-dyndb-ldap
Cloud Pak for Security (CP4S)
Data Computing Appliance (DCA)
Red Hat OpenShift Container Platform

Install updates from vendor's website.

ISC BIND - addressed in versions 9.11.22, 9.11.22-S1, 9.16.6, 9.17.4
bind (Red Hat package) main - addressed in versions 9.11.4-9.P2.el7_7.3, 9.11.4-26.P2.el7_9.2, 9.11.20-5.el8
Cloud Pak for Security (CP4S) - update to 1.8.0.0
bind (Alpine package) - update to 9.16.6-r0
bind9 (Debian package) - update to 9.11.5.P4+dfsg-5.1+deb10u2
bind9 (Ubuntu package) - addressed in versions 1:9.11.3+dfsg-1ubuntu1.13, 1:9.16.1-0ubuntu2.3
dnsperf - addressed in versions 2.3.4-2.fc31, 2.3.4-2.fc32
bind-license - addressed in versions 9.11.4-26.P2, 9.11.36-3
bind - addressed in versions 9.11.4-26.P2, 9.11.36-3
bind-utils - addressed in versions 9.11.4-26.P2, 9.11.36-3
bind-sdb-chroot - addressed in versions 9.11.4-26.P2, 9.11.36-3
bind-sdb - addressed in versions 9.11.4-26.P2, 9.11.36-3
bind-pkcs11-utils - addressed in versions 9.11.4-26.P2, 9.11.36-3
bind-pkcs11-libs - addressed in versions 9.11.4-26.P2, 9.11.36-3
bind-pkcs11-devel - addressed in versions 9.11.4-26.P2, 9.11.36-3
bind-pkcs11 - addressed in versions 9.11.4-26.P2, 9.11.36-3
bind-lite-devel - addressed in versions 9.11.4-26.P2, 9.11.36-3
bind-libs-lite - addressed in versions 9.11.4-26.P2, 9.11.36-3
bind-libs - addressed in versions 9.11.4-26.P2, 9.11.36-3
bind-export-libs - addressed in versions 9.11.4-26.P2, 9.11.36-3
bind-export-devel - addressed in versions 9.11.4-26.P2, 9.11.36-3
bind-devel - addressed in versions 9.11.4-26.P2, 9.11.36-3
bind-chroot - addressed in versions 9.11.4-26.P2, 9.11.36-3
bind-sdb - update to 9.11.21-3
bind - update to 9.11.21-3
python3-bind - update to 9.11.21-3
bind-chroot - update to 9.11.21-3
bind-debuginfo - update to 9.11.21-3
bind-debugsource - update to 9.11.21-3
bind-devel - update to 9.11.21-3
bind-export-devel - update to 9.11.21-3
bind-export-libs - update to 9.11.21-3
bind-libs - update to 9.11.21-3
bind-libs-lite - update to 9.11.21-3
bind-pkcs11 - update to 9.11.21-3
bind-utils - update to 9.11.21-3
bind-sdb-chroot - update to 9.11.21-3
bind-pkcs11-devel - update to 9.11.21-3
bind - addressed in versions 9.11.22-1.fc31, 9.11.22-1.fc32
python3-bind - update to 9.11.36-3
bind-dyndb-ldap - addressed in versions 11.2-4.fc31, 11.3-2.fc32
Data Computing Appliance (DCA) - update to 4.3.0.0
Red Hat OpenShift Container Platform - update to 4.5.20

• https://kb.isc.org/docs/cve-2020-8624

• Multiple vulnerabilities in ISC BIND
• Slackware Linux update for bind
• Gentoo update for BIND
• Debian update for bind9
• Permissions, Privileges, and Access Controls in bind (Alpine package)
• OpenSUSE Linux update for bind
• OpenSUSE Linux update for bind
• Red Hat Enterprise Linux 8 update for bind
• Red Hat Enterprise Linux 7 update for bind
• CentOS 7 update for bind
• Multiple vulnerabilities in Red Hat OpenShift Container Platform
• Red Hat Enterprise Linux 7 update for bind
• Multiple vulnerabilities in IBM Cloud Pak for Security
• Multiple vulnerabilities in Dell EMC Data Computing Appliance (DCA)
• openEuler 20.03 LTS update for bind
• Anolis OS update for bind (Anolis OS 8.6)
• Anolis OS update for bind
• Ubuntu update for bind9
• Fedora 32 update for bind, bind-dyndb-ldap, dnsperf
• Fedora 31 update for bind, bind-dyndb-ldap, dnsperf