CVE-2020-8616 BIND does not sufficiently limit the number of fetches performed when processing referrals

🗓️ 19 May 2020 14:05:15Reported by iscType

BIND vulnerability CVE-2020-861

Reporter	Title	Published	Views	Family All 205
IBM Security Bulletins	Security Bulletin: Vulnerability in bind affects IBM Integrated Analytics System	10 Nov 202011:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect V10 is impacted by denial of service vulnerabilities in Crunchy kernel (CVE-2020-8616, CVE-2020-8617)	7 Oct 202023:02	–	ibm
IBM Security Bulletins	Security Bulletin: Publicly disclosed vulnerabilities from Bind affect IBM Netezza Host Management	10 Aug 202010:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in BIND affect AIX (CVE-2020-8616 and CVE-2020-8617)	21 Aug 202021:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in bind (CVE-2020-8616 and CVE-2020-8617).	22 Sep 202123:38	–	ibm
IBM Security Bulletins	Security Bulletin: BIND for IBM i is affected by CVE-2020-8616 and CVE-2020-8617	6 Jul 202022:37	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package bind version 9.11.19-alt1	19 May 202000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package bind version 9.10.8.P1-alt2	26 May 202000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package bind version 9.11.19-alt1	20 May 202000:00	–	altlinux
Tenable Nessus	AIX 7.1 TL 5 : bind (IJ25924)	24 Aug 202000:00	–	nessus

[
  {
    "product": "BIND9",
    "vendor": "ISC",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.0 -> 9.11.18, 9.12.0 -> 9.12.4-P2, 9.14.0 -> 9.14.11, 9.16.0 -> 9.16.2, and releases 9.17.0 -> 9.17.1 of the 9.17 experimental development branch. All releases in the obsolete 9.13 and 9.15 development branches. All releases of BIND Supported Preview Edition from 9.9.3-S1 -> 9.11.18-S1"
      }
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WOGCJS2XQ3SQNF4W6GLZ73LWZJ6ZZWZI/
usn	www.usn.ubuntu.com/4365-2/
security	www.security.netapp.com/advisory/ntap-20200522-0002/
nxnsattack	www.nxnsattack.com/
kb	www.kb.isc.org/docs/cve-2020-8616
synology	www.synology.com/security/advisory/Synology_SA_20_12
openwall	www.openwall.com/lists/oss-security/2020/05/19/4
lists	www.lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html
usn	www.usn.ubuntu.com/4365-1/
lists	www.lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html

20 Oct 2020 11:06Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.6

EPSS0.10313