Bug 723988 (CVE-2020-8616)

Summary:	<net-dns/bind-{9.14.12,9.16.3}: BIND does not sufficiently limit the number of fetches performed when processing referrals (CVE-2020-8616)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	minor	CC:	anders.gentoo, idl0r, jasmin+gentoo, luke, solor, zlogene
Priority:	Normal	Keywords:	CC-ARCHES
Version:	unspecified	Flags:	nattka: sanity-check+
Hardware:	All
OS:	Linux
URL:	https://kb.isc.org/docs/cve-2020-8616
See Also:	https://bugs.gentoo.org/show_bug.cgi?id=728590
Whiteboard:	B3 [noglsa cve]
Package list:	=net-dns/bind-9.14.12 amd64 arm arm64 ppc ppc64 sparc x86 =net-dns/bind-tools-9.14.12	Runtime testing required:	---
Bug Depends on:
Bug Blocks:	712692

Description GLSAMaker/CVETool Bot gentoo-dev

2020-05-19 15:17:37 UTC

CVE-2020-8616 (https://nvd.nist.gov/vuln/detail/CVE-2020-8616):
  BIND does not sufficiently limit the number of fetches performed when
  processing referrals.

Comment 1 Sam James archtester

2020-05-19 18:06:44 UTC

*** Bug 723958 has been marked as a duplicate of this bug. ***

Comment 2 Sam James archtester

2020-05-20 14:13:37 UTC

@maintainer(s), please add keyword CC-ARCHES if you agree.

Comment 3 Sam James archtester

2020-06-04 16:57:57 UTC

I'll CC-ARCHES now, please remove and let us know if any objections.

Comment 4 Rolf Eike Beer archtester

2020-06-05 18:44:31 UTC

sparc stable

Comment 5 Sam James archtester

2020-06-06 19:34:26 UTC

arm64 stable

Comment 6 Rolf Eike Beer archtester

2020-06-08 16:08:48 UTC

hppa stable

Comment 7 Sam James archtester

2020-06-09 20:09:32 UTC

arm stable

Comment 8 Sergei Trofimovich (RETIRED) gentoo-dev

2020-06-14 20:28:22 UTC

ppc stable

Comment 9 Sam James archtester

2020-06-16 14:51:39 UTC

@amd64, @x86: ping...

Comment 10 Mikle Kolyada (RETIRED) archtester

2020-06-20 07:53:45 UTC

amd64 stable

Comment 11 Mikle Kolyada (RETIRED) archtester

2020-06-20 07:54:17 UTC

x86 stable

Comment 12 Mikle Kolyada (RETIRED) archtester

2020-06-20 07:55:05 UTC

ppc64 stable