723988 – (CVE-2020-8616) <net-dns/bind-{9.14.12,9.16.3}: BIND does not sufficiently limit the number of fetches performed when processing referrals (CVE-2020-8616)

Bug 723988 (CVE-2020-8616) - <net-dns/bind-{9.14.12,9.16.3}: BIND does not sufficiently limit the number of fetches performed when processing referrals (CVE-2020-8616)

Summary: <net-dns/bind-{9.14.12,9.16.3}: BIND does not sufficiently limit the number o...

Status:	RESOLVED FIXED

Alias:	CVE-2020-8616

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal minor
Assignee:	Gentoo Security

URL:	https://kb.isc.org/docs/cve-2020-8616
Whiteboard:	B3 [noglsa cve]
Keywords:	CC-ARCHES

Duplicates (1):	723958 (view as bug list)
Depends on:
Blocks:	712692
	Show dependency tree

Reported:	2020-05-19 15:17 UTC by GLSAMaker/CVETool Bot
Modified:	2020-06-20 08:04 UTC (History)
CC List:	6 users (show)

See Also:	CVE-2020-8618, CVE-2020-8619
Package list:	=net-dns/bind-9.14.12 amd64 arm arm64 ppc ppc64 sparc x86 =net-dns/bind-tools-9.14.12
Runtime testing required:	---

Flags:	nattka: sanity-check+

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description GLSAMaker/CVETool Bot gentoo-dev

2020-05-19 15:17:37 UTC

CVE-2020-8616 (https://nvd.nist.gov/vuln/detail/CVE-2020-8616):
  BIND does not sufficiently limit the number of fetches performed when
  processing referrals.

Comment 1 Sam James archtester

2020-05-19 18:06:44 UTC

*** Bug 723958 has been marked as a duplicate of this bug. ***

Comment 2 Sam James archtester

2020-05-20 14:13:37 UTC

@maintainer(s), please add keyword CC-ARCHES if you agree.

Comment 3 Sam James archtester

2020-06-04 16:57:57 UTC

I'll CC-ARCHES now, please remove and let us know if any objections.

Comment 4 Rolf Eike Beer archtester

2020-06-05 18:44:31 UTC

sparc stable

Comment 5 Sam James archtester

2020-06-06 19:34:26 UTC

arm64 stable

Comment 6 Rolf Eike Beer archtester

2020-06-08 16:08:48 UTC

hppa stable

Comment 7 Sam James archtester

2020-06-09 20:09:32 UTC

arm stable

Comment 8 Sergei Trofimovich (RETIRED) gentoo-dev

2020-06-14 20:28:22 UTC

ppc stable

Comment 9 Sam James archtester

2020-06-16 14:51:39 UTC

@amd64, @x86: ping...

Comment 10 Mikle Kolyada (RETIRED) archtester

2020-06-20 07:53:45 UTC

amd64 stable

Comment 11 Mikle Kolyada (RETIRED) archtester

2020-06-20 07:54:17 UTC

x86 stable

Comment 12 Mikle Kolyada (RETIRED) archtester

2020-06-20 07:55:05 UTC

ppc64 stable