Read the docs
Red Hat Security Advisory

RHSA-2020:4500

bind security, bug fix, and enhancement update

Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 4 records

TI-2020-06916 CVE-2020-8623 · GHSA-3hh5-h95j-2cw7

A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c

Priority MEDIUM 42

In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query p…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06606 Published 2020-08-21 Fixed in 9.11.22, 9.16.6 +1 CWE-617
TI-2020-06915 CVE-2020-8622 · GHSA-fh6r-7j2f-pmw4

A truncated TSIG response can lead to an assertion failure

Priority LOW 38

In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the serve…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.05904 Published 2020-08-21 Partial fix · 9.11.22, 9.16.6 +1 CWE-617
TI-2020-06917 CVE-2020-8624 · GHSA-qgv6-6x66-mr9j

update-policy rules of type "subdomain" are enforced incorrectly

Priority LOW 27

In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0382 Published 2020-08-21 Fixed in 9.11.22, 9.16.6 +2 CWE-269