CVE-2020-8616

bind: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols

CVE-2020-8616 is fixed in 36 products on 1 platform, first by bind9 1:9.11.3+dfsg-1ubuntu1.12, released May 18, 2020. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.6
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.1088
95th percentile

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: BIND does not sufficiently limit the number of fetches performed when processing referrals (CVE-2020-8616) * bind: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c (CVE-2020-8617) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
bind · RHEL 8 32:9.11.13-5.el8_2 RHSA-2020:2338 May 28, 2020
bind · ol 8 32:9.11.13-5.el8_2 ELSA-2020-2338 Jun 4, 2020
bind-chroot · RHEL 8 32:9.11.13-5.el8_2 RHSA-2020:2338 May 28, 2020
bind-chroot · ol 8 32:9.11.13-5.el8_2 ELSA-2020-2338 Jun 4, 2020
bind-devel · RHEL 8 32:9.11.13-5.el8_2 RHSA-2020:2338 May 28, 2020
bind-devel · ol 8 32:9.11.13-5.el8_2 ELSA-2020-2338 Jun 4, 2020
bind-export-devel · RHEL 8 32:9.11.13-5.el8_2 RHSA-2020:2338 May 28, 2020
bind-export-devel · ol 8 32:9.11.13-5.el8_2 ELSA-2020-2338 Jun 4, 2020
bind-export-libs · RHEL 8 32:9.11.13-5.el8_2 RHSA-2020:2338 May 28, 2020
bind-export-libs · ol 8 32:9.11.13-5.el8_2 ELSA-2020-2338 Jun 4, 2020
bind-libs · RHEL 8 32:9.11.13-5.el8_2 RHSA-2020:2338 May 28, 2020
bind-libs · ol 8 32:9.11.13-5.el8_2 ELSA-2020-2338 Jun 4, 2020
bind-libs-lite · RHEL 8 32:9.11.13-5.el8_2 RHSA-2020:2338 May 28, 2020
bind-libs-lite · ol 8 32:9.11.13-5.el8_2 ELSA-2020-2338 Jun 4, 2020
bind-license · RHEL 8 32:9.11.13-5.el8_2 RHSA-2020:2338 May 28, 2020
bind-license · ol 8 32:9.11.13-5.el8_2 ELSA-2020-2338 Jun 4, 2020
bind-lite-devel · RHEL 8 32:9.11.13-5.el8_2 RHSA-2020:2338 May 28, 2020
bind-lite-devel · ol 8 32:9.11.13-5.el8_2 ELSA-2020-2338 Jun 4, 2020
bind-pkcs11 · RHEL 8 32:9.11.13-5.el8_2 RHSA-2020:2338 May 28, 2020
bind-pkcs11 · ol 8 32:9.11.13-5.el8_2 ELSA-2020-2338 Jun 4, 2020
bind-pkcs11-devel · RHEL 8 32:9.11.13-5.el8_2 RHSA-2020:2338 May 28, 2020
bind-pkcs11-devel · ol 8 32:9.11.13-5.el8_2 ELSA-2020-2338 Jun 4, 2020
bind-pkcs11-libs · RHEL 8 32:9.11.13-5.el8_2 RHSA-2020:2338 May 28, 2020
bind-pkcs11-libs · ol 8 32:9.11.13-5.el8_2 ELSA-2020-2338 Jun 4, 2020
bind-pkcs11-utils · RHEL 8 32:9.11.13-5.el8_2 RHSA-2020:2338 May 28, 2020
bind-pkcs11-utils · ol 8 32:9.11.13-5.el8_2 ELSA-2020-2338 Jun 4, 2020
bind-sdb · RHEL 8 32:9.11.13-5.el8_2 RHSA-2020:2338 May 28, 2020
bind-sdb · ol 8 32:9.11.13-5.el8_2 ELSA-2020-2338 Jun 4, 2020
bind-sdb-chroot · RHEL 8 32:9.11.13-5.el8_2 RHSA-2020:2338 May 28, 2020
bind-sdb-chroot · ol 8 32:9.11.13-5.el8_2 ELSA-2020-2338 Jun 4, 2020
bind-utils · RHEL 8 32:9.11.13-5.el8_2 RHSA-2020:2338 May 28, 2020
bind-utils · ol 8 32:9.11.13-5.el8_2 ELSA-2020-2338 Jun 4, 2020
bind9 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.12 bind9 1:9.11.3+dfsg-1ubuntu1.12 May 18, 2020
bind9 · Ubuntu 20.04 LTS (focal) 1:9.16.1-0ubuntu2.1 bind9 1:9.16.1-0ubuntu2.1 May 18, 2020
bind9-dnsutils · Ubuntu 20.04 LTS (focal) 1:9.16.1-0ubuntu2.1 bind9-dnsutils 1:9.16.1-0ubuntu2.1 May 18, 2020
bind9-host · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.12 bind9-host 1:9.11.3+dfsg-1ubuntu1.12 May 18, 2020
bind9-host · Ubuntu 20.04 LTS (focal) 1:9.16.1-0ubuntu2.1 bind9-host 1:9.16.1-0ubuntu2.1 May 18, 2020
bind9-libs · Ubuntu 20.04 LTS (focal) 1:9.16.1-0ubuntu2.1 bind9-libs 1:9.16.1-0ubuntu2.1 May 18, 2020
bind9-utils · Ubuntu 20.04 LTS (focal) 1:9.16.1-0ubuntu2.1 bind9-utils 1:9.16.1-0ubuntu2.1 May 18, 2020
bind9utils · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.12 bind9utils 1:9.11.3+dfsg-1ubuntu1.12 May 18, 2020
bind9utils · Ubuntu 20.04 LTS (focal) 1:9.16.1-0ubuntu2.1 bind9utils 1:9.16.1-0ubuntu2.1 May 18, 2020
dnsutils · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.12 dnsutils 1:9.11.3+dfsg-1ubuntu1.12 May 18, 2020
dnsutils · Ubuntu 20.04 LTS (focal) 1:9.16.1-0ubuntu2.1 dnsutils 1:9.16.1-0ubuntu2.1 May 18, 2020
libbind9-160 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.12 libbind9-160 1:9.11.3+dfsg-1ubuntu1.12 May 18, 2020
libdns-export1100 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.12 libdns-export1100 1:9.11.3+dfsg-1ubuntu1.12 May 18, 2020
libdns1100 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.12 libdns1100 1:9.11.3+dfsg-1ubuntu1.12 May 18, 2020
libirs-export160 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.12 libirs-export160 1:9.11.3+dfsg-1ubuntu1.12 May 18, 2020
libirs160 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.12 libirs160 1:9.11.3+dfsg-1ubuntu1.12 May 18, 2020
libisc-export169 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.12 libisc-export169 1:9.11.3+dfsg-1ubuntu1.12 May 18, 2020
libisc169 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.12 libisc169 1:9.11.3+dfsg-1ubuntu1.12 May 18, 2020
libisccc-export160 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.12 libisccc-export160 1:9.11.3+dfsg-1ubuntu1.12 May 18, 2020
libisccc160 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.12 libisccc160 1:9.11.3+dfsg-1ubuntu1.12 May 18, 2020
libisccfg-export160 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.12 libisccfg-export160 1:9.11.3+dfsg-1ubuntu1.12 May 18, 2020
libisccfg160 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.12 libisccfg160 1:9.11.3+dfsg-1ubuntu1.12 May 18, 2020
liblwres160 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.12 liblwres160 1:9.11.3+dfsg-1ubuntu1.12 May 18, 2020
python3-bind · RHEL 8 32:9.11.13-5.el8_2 RHSA-2020:2338 May 28, 2020
python3-bind · ol 8 32:9.11.13-5.el8_2 ELSA-2020-2338 Jun 4, 2020

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.