Security Bulletin: BIND for IBM i is affected by CVE-2020-8616 and CVE-2020-8617

Summary BIND is used by IBM i. IBM i has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-8617 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by a logic error in code which checks TSIG validity. A remote attacker could exploit this vulnerability to trigger ...

Fedora: Security Advisory for bind (FEDORA-2020-5f8da4b260)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Amazon Linux 2 : bind (ALAS-2020-1441)

The version of bind installed on the remote host is prior to 9.11.4-9.P2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1441 advisory. managed-keys is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which...

Medium: bind

Issue Overview: "managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses managed-keys to exit du...

[SECURITY] Fedora 31 Update: bind-9.11.20-1.fc31

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Security fix for the ALT Linux 10 package bind version 9.11.20-alt1

June 29, 2020 Stanislav Levin 9.11.20-alt1 - 9.11.19 - 9.11.20 fixes: CVE-2020-8619...

Fedora 31 : 32:bind (2020-5f8da4b260)

Update to last release, including security fix. Upstream Release notes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducin...

Security fix for the ALT Linux 9 package bind version 9.11.20-alt1

June 29, 2020 Stanislav Levin 9.11.20-alt1 - 9.11.19 - 9.11.20 fixes: CVE-2020-8619...

[ASA-202006-13] bind: denial of service

Arch Linux Security Advisory ASA-202006-13 ========================================== Severity: Medium Date : 2020-06-28 CVE-ID : CVE-2020-8618 CVE-2020-8619 Package : bind Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1191 Summary ======= The package bind before...

ISC BIND 9.16.x < 9.16.4 DoS

The version of ISC BIND installed on the remote host is prior to 9.16.4. It is, therefore, affected by a denial of service DoS vulnerability in its zone transfer functionality due to insufficient validation of user-supplied input. An authenticated, remote attacker can exploit this issue, to cause...

ISC BIND 9.11.x < 9.11.20 / 9.11.14-S1 < 9.11.19-S9 / 9.14.x < 9.14.13 / 9.16.x < 9.16.4 DoS

The version of ISC BIND installed on the remote host is affected by a denial of service DoS vulnerability in rbtdb.c due to an assertion failure. An authenticated, remote attacker can exploit this issue, to cause a DoS condition. Note that Nessus has not tested for this issue but has instead reli...

[SECURITY] Fedora 32 Update: bind-9.11.20-1.fc32

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Beijing Jingwei Wisdom Information Technology Co. Jingwei business card app has a logic flaw vulnerability

Jingwei Business Card is a business card entry and business socialization tool for business people launched by Shanglin Huatong. Beijing Jingwei Wisdom Information Technology Co., Ltd Jingwei Business Card app has a logic flaw vulnerability, which can be exploited by an attacker to bind another...

Fedora 32 : 32:bind (2020-54a91444ff)

Update to last release, including security fix. Upstream Release notes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducin...

Fedora: Security Advisory for bind (FEDORA-2020-54a91444ff)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

FreeBSD : BIND -- Remote Denial of Service vulnerability (75d72e03-b137-11ea-8659-901b0ef719ab)

ISC reports : An assertion check in BIND that is meant to prevent going beyond the end of a buffer when processing incoming data can be incorrectly triggered by a large response during zone transfer. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

FreeBSD : BIND -- Remote Denial of Service vulnerability (f00d1873-b138-11ea-8659-901b0ef719ab)

ISC reports : The asterisk character '' is allowed in DNS zone files, where it is most commonly present as a wildcard at a terminal node of the Domain Name System graph. However, the RFCs do not require and BIND does not enforce that an asterisk character be present only at a terminal node. A...

Slackware 14.0 / 14.1 / 14.2 / current : bind (SSA:2020-170-01)

New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-170-01. The text itself is copyright C Slackware Linux...

SUSE-SU-2020:14400-1 Security update for bind

This update for bind fixes the following issues: - CVE-2020-8616: Fixed the insufficient limit on the number of fetches performed when processing referrals bsc1171740. - CVE-2020-8617: Fixed a logic error in code which checks TSIG validity bsc1171740. - CVE-2018-5741: Fixed the documentation...

[slackware-security] bind

New bind packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/bind-9.11.20-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: It was possible to trigger an INSIST in...