Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 723988 (CVE-2020-8616)

Summary: <net-dns/bind-{9.14.12,9.16.3}: BIND does not sufficiently limit the number of fetches performed when processing referrals (CVE-2020-8616)
Product: Gentoo Security Reporter: GLSAMaker/CVETool Bot <glsamaker>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: RESOLVED FIXED    
Severity: minor CC: anders.gentoo, idl0r, jbuchert+genbug, luke, solor, zlogene
Priority: Normal Keywords: CC-ARCHES
Version: unspecifiedFlags: nattka: sanity-check+
Hardware: All   
OS: Linux   
URL: https://kb.isc.org/docs/cve-2020-8616
See Also: https://bugs.gentoo.org/show_bug.cgi?id=728590
Whiteboard: B3 [noglsa cve]
Package list:
=net-dns/bind-9.14.12 amd64 arm arm64 ppc ppc64 sparc x86 =net-dns/bind-tools-9.14.12
Runtime testing required: ---
Bug Depends on:    
Bug Blocks: 712692    

Description GLSAMaker/CVETool Bot gentoo-dev 2020-05-19 15:17:37 UTC
CVE-2020-8616 (https://nvd.nist.gov/vuln/detail/CVE-2020-8616):
  BIND does not sufficiently limit the number of fetches performed when
  processing referrals.
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-05-19 18:06:44 UTC
*** Bug 723958 has been marked as a duplicate of this bug. ***
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-05-20 14:13:37 UTC
@maintainer(s), please add keyword CC-ARCHES if you agree.
Comment 3 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-06-04 16:57:57 UTC
I'll CC-ARCHES now, please remove and let us know if any objections.
Comment 4 Rolf Eike Beer archtester 2020-06-05 18:44:31 UTC
sparc stable
Comment 5 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-06-06 19:34:26 UTC
arm64 stable
Comment 6 Rolf Eike Beer archtester 2020-06-08 16:08:48 UTC
hppa stable
Comment 7 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-06-09 20:09:32 UTC
arm stable
Comment 8 Sergei Trofimovich (RETIRED) gentoo-dev 2020-06-14 20:28:22 UTC
ppc stable
Comment 9 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-06-16 14:51:39 UTC
@amd64, @x86: ping...
Comment 10 Mikle Kolyada archtester Gentoo Infrastructure gentoo-dev Security 2020-06-20 07:53:45 UTC
amd64 stable
Comment 11 Mikle Kolyada archtester Gentoo Infrastructure gentoo-dev Security 2020-06-20 07:54:17 UTC
x86 stable
Comment 12 Mikle Kolyada archtester Gentoo Infrastructure gentoo-dev Security 2020-06-20 07:55:05 UTC
ppc64 stable