#VU28121 Resource management error in ISC BIND - CVE-2020-8616

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources with the applicatoin. In order for a server performing recursion to locate records in the DNS graph it must be capable of processing referrals, such as those received when it attempts to query an authoritative server for a record which is delegated elsewhere. A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause a recursing server to issue a very large number of fetches in an attempt to process the referral.

Remediation

External links

• http://www.nxnsattack.com
• http://www.openwall.com/lists/oss-security/2020/05/19/4
• https://kb.isc.org/docs/cve-2020-8616