Red Hat Security Advisory

RHSA-2020:4183

bind security update

Released 2020-10-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) bind-32:9.8.2-0.68.rc1.el6_10.8, bind-libs-32:9.8.2-0.68.rc1.el6_10.8, bind-utils-32:9.8.2-0.68.rc1.el6_10.8
Red Hat Enterprise Linux Desktop Optional (v. 6) bind-32:9.8.2-0.68.rc1.el6_10.8, bind-chroot-32:9.8.2-0.68.rc1.el6_10.8, bind-devel-32:9.8.2-0.68.rc1.el6_10.8 +1
Red Hat Enterprise Linux HPC Node (v. 6) bind-32:9.8.2-0.68.rc1.el6_10.8, bind-libs-32:9.8.2-0.68.rc1.el6_10.8, bind-utils-32:9.8.2-0.68.rc1.el6_10.8
Red Hat Enterprise Linux HPC Node Optional (v. 6) bind-32:9.8.2-0.68.rc1.el6_10.8, bind-chroot-32:9.8.2-0.68.rc1.el6_10.8, bind-devel-32:9.8.2-0.68.rc1.el6_10.8 +1
Red Hat Enterprise Linux Server (v. 6) bind-32:9.8.2-0.68.rc1.el6_10.8, bind-chroot-32:9.8.2-0.68.rc1.el6_10.8, bind-libs-32:9.8.2-0.68.rc1.el6_10.8 +2
Red Hat Enterprise Linux Server Optional (v. 6) bind-devel-32:9.8.2-0.68.rc1.el6_10.8, bind-devel-32:9.8.2-0.68.rc1.el6_10.8.ppc, bind-sdb-32:9.8.2-0.68.rc1.el6_10.8
Red Hat Enterprise Linux Workstation (v. 6) bind-32:9.8.2-0.68.rc1.el6_10.8, bind-chroot-32:9.8.2-0.68.rc1.el6_10.8, bind-libs-32:9.8.2-0.68.rc1.el6_10.8 +1
Red Hat Enterprise Linux Workstation Optional (v. 6) bind-devel-32:9.8.2-0.68.rc1.el6_10.8, bind-sdb-32:9.8.2-0.68.rc1.el6_10.8

Fixes 1 record

TI-2020-06915 CVE-2020-8622 · GHSA-fh6r-7j2f-pmw4

A truncated TSIG response can lead to an assertion failure

LOW 38

In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the serve…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.05904 Published 2020-08-21 Partial fix · 9.11.22, 9.16.6 +1 CWE-617