Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 723988 (CVE-2020-8616) - <net-dns/bind-{9.14.12,9.16.3}: BIND does not sufficiently limit the number of fetches performed when processing referrals (CVE-2020-8616)
Summary: <net-dns/bind-{9.14.12,9.16.3}: BIND does not sufficiently limit the number o...
Status: RESOLVED FIXED
Alias: CVE-2020-8616
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
URL: https://kb.isc.org/docs/cve-2020-8616
Whiteboard: B3 [noglsa cve]
Keywords: CC-ARCHES
: 723958 (view as bug list)
Depends on:
Blocks: 712692
  Show dependency tree
 
Reported: 2020-05-19 15:17 UTC by GLSAMaker/CVETool Bot
Modified: 2020-06-20 08:04 UTC (History)
6 users (show)

See Also:
Package list:
=net-dns/bind-9.14.12 amd64 arm arm64 ppc ppc64 sparc x86 =net-dns/bind-tools-9.14.12
Runtime testing required: ---
nattka: sanity-check+


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description GLSAMaker/CVETool Bot gentoo-dev 2020-05-19 15:17:37 UTC
CVE-2020-8616 (https://nvd.nist.gov/vuln/detail/CVE-2020-8616):
  BIND does not sufficiently limit the number of fetches performed when
  processing referrals.
Comment 1 Sam James archtester gentoo-dev Security 2020-05-19 18:06:44 UTC
*** Bug 723958 has been marked as a duplicate of this bug. ***
Comment 2 Sam James archtester gentoo-dev Security 2020-05-20 14:13:37 UTC
@maintainer(s), please add keyword CC-ARCHES if you agree.
Comment 3 Sam James archtester gentoo-dev Security 2020-06-04 16:57:57 UTC
I'll CC-ARCHES now, please remove and let us know if any objections.
Comment 4 Rolf Eike Beer archtester 2020-06-05 18:44:31 UTC
sparc stable
Comment 5 Sam James archtester gentoo-dev Security 2020-06-06 19:34:26 UTC
arm64 stable
Comment 6 Rolf Eike Beer archtester 2020-06-08 16:08:48 UTC
hppa stable
Comment 7 Sam James archtester gentoo-dev Security 2020-06-09 20:09:32 UTC
arm stable
Comment 8 Sergei Trofimovich (RETIRED) gentoo-dev 2020-06-14 20:28:22 UTC
ppc stable
Comment 9 Sam James archtester gentoo-dev Security 2020-06-16 14:51:39 UTC
@amd64, @x86: ping...
Comment 10 Mikle Kolyada archtester Gentoo Infrastructure gentoo-dev Security 2020-06-20 07:53:45 UTC
amd64 stable
Comment 11 Mikle Kolyada archtester Gentoo Infrastructure gentoo-dev Security 2020-06-20 07:54:17 UTC
x86 stable
Comment 12 Mikle Kolyada archtester Gentoo Infrastructure gentoo-dev Security 2020-06-20 07:55:05 UTC
ppc64 stable