CVE-2020-8616

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-8616
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8616.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-8616
Downstream
Related
Published
2020-05-19T14:15:11.877Z
Modified
2026-04-02T06:15:32.130031Z
Severity
  • 8.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause a recursing server to issue a very large number of fetches in an attempt to process the referral. This has at least two potential effects: The performance of the recursing server can potentially be degraded by the additional work required to perform these fetches, and The attacker can exploit this behavior to use the recursing server as a reflector in a reflection attack with a high amplification factor.

References

Affected packages

Git / gitlab.isc.org/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events
Introduced
19d6c56085e97cf4ac559cdc27edd624127bcb32
Last affected
bc6c00f15aab336c7467e3fbad977ce05cdf398e
Introduced
71a40862c0be867999867cd99e21c2266a5e452b
Last affected
a953e08740c2d76cd69e3e9515e14544fa3a1dda
Introduced
29b3a7d84240a51099490c0f39ae537f4e0d6a7a
Last affected
6491691ac4bec0dc59e3eeba2797d65527f3bcd6
Introduced
d1e053ed8dff25af8af241cf5ee2c83bd41a25ad
Last affected
098f68799b79aa0c53dc60bf3759347c87a8ba25
Introduced
031bca512d4788356de4cce6f3e61e6b1a878f9c
Last affected
fa2f16db89ddfb54c4a0e10d103a521e2fda2e0b
Introduced
6270e602ea52209243475c4f1edbabe084e148f7
Last affected
b310dc7f5ec5458c5b831be99cdbac03e33be4a6
Introduced
04ca7cc4b6993f47ea61852c759d047c83be7b3f
Last affected
deb57872b630b9957662cf443e1e0001ab0e7b73
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
28e45cd00e2e1e621a2e97ba1ee6bdc6a4102e16
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1c59cea1c0e26e2da3f2afb90200bfe9f7748c03
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
341e64a2de908ceec50ed46d243bf3402342735c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fe1302d54424009769409e46c0d50c0bcccd1d31
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
617639b7cc40ba9eb6fde2d98099726d50da812e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
eba38b89007f65bc6c1fdd2451034bbe3908b9a4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
19d6c56085e97cf4ac559cdc27edd624127bcb32
Database specific 
{
    "versions": [
        {
            "introduced": "9.0.0"
        },
        {
            "last_affected": "9.11.18"
        },
        {
            "introduced": "9.12.0"
        },
        {
            "last_affected": "9.12.4"
        },
        {
            "introduced": "9.13.0"
        },
        {
            "last_affected": "9.13.7"
        },
        {
            "introduced": "9.14.0"
        },
        {
            "last_affected": "9.14.11"
        },
        {
            "introduced": "9.15.0"
        },
        {
            "last_affected": "9.15.6"
        },
        {
            "introduced": "9.16.0"
        },
        {
            "last_affected": "9.16.2"
        },
        {
            "introduced": "9.17.0"
        },
        {
            "last_affected": "9.17.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.12.4-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.9.3-s1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.10.5-s1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.10.7-s1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.11.3-s1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.11.6-s1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0"
        }
    ]
}

Affected versions

v9.*
v9.0.0
v9.0.0a1
v9.0.0a2
v9.0.0a3
v9.0.0b1
v9.0.0b2
v9.0.0b3
v9.0.0b4
v9.0.0b5
v9.0.0rc1
v9.0.0rc2
v9.0.0rc3
v9.0.0rc4
v9.0.0rc5
v9.0.0rc6
v9.0.1
v9.0.1rc1
v9.0.1rc2
v9.1.0
v9.1.0b1
v9.1.0b2
v9.1.0b3
v9.1.0rc1
v9.1.1
v9.1.1-P1
v9.1.1-P2
v9.1.1-P3
v9.1.1-P4
v9.1.1rc1
v9.1.1rc2
v9.1.1rc3
v9.1.1rc4
v9.1.1rc5
v9.1.1rc6
v9.1.1rc7
v9.1.2
v9.1.2rc1
v9.1.3
v9.1.3-P1
v9.1.3-P2
v9.1.3-P3
v9.1.3rc1
v9.1.3rc2
v9.1.3rc3
v9.10.0
v9.10.0-P1
v9.10.0-P2
v9.10.0a1
v9.10.0a2
v9.10.0b1
v9.10.0b2
v9.10.0rc1
v9.10.0rc2
v9.10.1
v9.10.1-P1
v9.10.1-P2
v9.10.1b1
v9.10.1b2
v9.10.1rc1
v9.10.1rc2
v9.10.2
v9.10.2-P1
v9.10.2-P2
v9.10.2-P3
v9.10.2-P4
v9.10.2b1
v9.10.2rc1
v9.10.2rc2
v9.10.3
v9.10.3-P2
v9.10.3-P3
v9.10.3-P4
v9.10.3b1
v9.10.3rc1
v9.10.4
v9.10.4-P1
v9.10.4-P2
v9.10.4-P3
v9.10.4-P4
v9.10.4-P5
v9.10.4-P6
v9.10.4-P8
v9.10.4b1
v9.10.4b2
v9.10.4b3
v9.10.4rc1
v9.10.5b1
v9.11.0
v9.11.0-P1
v9.11.0-P2
v9.11.0-P3
v9.11.0-P5
v9.11.0a1
v9.11.0a2
v9.11.0a3
v9.11.0b1
v9.11.0b2
v9.11.0b3
v9.11.0rc1
v9.11.0rc2
v9.11.0rc3
v9.11.1
v9.11.1-P1
v9.11.1-P2
v9.11.1-P3
v9.11.1b1
v9.11.1rc1
v9.11.1rc2
v9.11.1rc3
v9.11.2
v9.11.2-P1
v9.11.2b1
v9.11.2rc1
v9.11.2rc2
v9.11.3b1
v9.12.0
v9.12.0a0
v9.12.0a1
v9.12.0b1
v9.12.0b2
v9.12.0rc1
v9.12.0rc2
v9.12.0rc3
v9.12.1
v9.12.1-P2
v9.12.1b1
v9.12.1rc1
v9.12.2
v9.12.2-P1
v9.12.2-P2
v9.12.2rc1
v9.12.2rc2
v9.12.3
v9.12.3-P1
v9.12.3-P4
v9.12.3rc1
v9.12.4
v9.12.4rc1
v9.13.0
v9.13.1
v9.13.2
v9.13.3
v9.13.4
v9.13.5
v9.13.5-W1
v9.13.6
v9.13.7
v9.14.0
v9.15.0
v9.15.1
v9.15.2
v9.15.3
v9.15.4
v9.15.5
v9.15.6
v9.16.0
v9.16.1
v9.16.10
v9.16.11
v9.16.12
v9.16.13
v9.16.15
v9.16.16
v9.16.17
v9.16.18
v9.16.19
v9.16.2
v9.16.20
v9.16.21
v9.16.22
v9.16.23
v9.16.24
v9.16.25
v9.16.26
v9.16.27
v9.16.28
v9.16.29
v9.16.3
v9.16.30
v9.16.31
v9.16.32
v9.16.33
v9.16.34
v9.16.35
v9.16.36
v9.16.37
v9.16.38
v9.16.39
v9.16.4
v9.16.40
v9.16.41
v9.16.42
v9.16.43
v9.16.44
v9.16.45
v9.16.48
v9.16.49
v9.16.5
v9.16.50
v9.16.6
v9.16.7
v9.16.8
v9.16.9
v9.17.0
v9.2.0
v9.2.0-P1
v9.2.0-P2
v9.2.0a1
v9.2.0a2
v9.2.0a3
v9.2.0b1
v9.2.0b2
v9.2.0rc1
v9.2.0rc10
v9.2.0rc2
v9.2.0rc3
v9.2.0rc4
v9.2.0rc5
v9.2.0rc6
v9.2.0rc7
v9.2.0rc8
v9.2.0rc9
v9.2.1
v9.2.1-P1
v9.2.1rc1
v9.2.1rc2
v9.2.2
v9.2.2-P1
v9.2.2-P2
v9.2.2-P3
v9.2.2rc1
v9.2.3
v9.2.3rc1
v9.2.3rc2
v9.2.3rc3
v9.2.3rc4
v9.2.4
v9.2.4rc1
v9.2.4rc2
v9.2.4rc3
v9.2.4rc4
v9.2.4rc5
v9.2.4rc6
v9.2.4rc7
v9.2.4rc8
v9.2.5
v9.2.5rc1
v9.2.6
v9.2.6-P1
v9.2.6-P2
v9.2.6b1
v9.2.6b2
v9.2.6rc1
v9.2.7
v9.2.7b1
v9.2.7rc1
v9.2.7rc2
v9.2.7rc3
v9.2.8
v9.2.8-P1
v9.2.9
v9.2.9b1
v9.2.9rc1
v9.3.0
v9.3.0rc1
v9.3.0rc2
v9.3.0rc3
v9.3.0rc4
v9.3.1
v9.3.1rc1
v9.3.2
v9.3.2-P1
v9.3.2-P2
v9.3.2b1
v9.3.2b2
v9.3.2rc1
v9.3.3
v9.3.3b1
v9.3.3rc1
v9.3.3rc2
v9.3.3rc3
v9.3.4
v9.3.4-P1
v9.3.5
v9.3.5-P1
v9.3.5-P2
v9.3.5-P2-W1
v9.3.5-P2-W2
v9.3.5b1
v9.3.5rc1
v9.3.5rc2
v9.3.6
v9.3.6-P1
v9.3.6-P2
v9.3.6b1
v9.3.6rc1
v9.4-ESV
v9.4-ESV-R1
v9.4-ESV-R2
v9.4-ESV-R3
v9.4-ESV-R4
v9.4-ESV-R4-P1
v9.4-ESV-R5
v9.4-ESV-R5-P1
v9.4-ESV-R5b1
v9.4-ESV-R5rc1
v9.4-ESVb1
v9.4-ESVrc1
v9.4.0
v9.4.0a1
v9.4.0a2
v9.4.0a3
v9.4.0a4
v9.4.0a5
v9.4.0a6
v9.4.0b1
v9.4.0b2
v9.4.0b3
v9.4.0b4
v9.4.0rc1
v9.4.0rc2
v9.4.1
v9.4.1-P1
v9.4.2
v9.4.2-P1
v9.4.2-P2
v9.4.2-P2-W1
v9.4.2-P2-W2
v9.4.2b1
v9.4.2rc1
v9.4.2rc2
v9.4.3
v9.4.3-P1
v9.4.3-P2
v9.4.3-P3
v9.4.3-P4
v9.4.3-P5
v9.4.3b1
v9.4.3b2
v9.4.3b3
v9.4.3rc1
v9.4.4b1
v9.5.0
v9.5.0-P1
v9.5.0-P2
v9.5.0-P2-W1
v9.5.0-P2-W2
v9.5.0a1
v9.5.0a2
v9.5.0a3
v9.5.0a4
v9.5.0a5
v9.5.0a6
v9.5.0a7
v9.5.0b1
v9.5.0b2
v9.5.0b3
v9.5.0rc1
v9.5.1
v9.5.1-P1
v9.5.1-P2
v9.5.1-P3
v9.5.1b1
v9.5.1b2
v9.5.1b3
v9.5.1rc1
v9.5.1rc2
v9.5.2
v9.5.2-P1
v9.5.2-P2
v9.5.2-P3
v9.5.2-P4
v9.5.2b1
v9.5.2rc1
v9.5.3b1
v9.5.3rc1
v9.6-ESV
v9.6-ESV-R1
v9.6-ESV-R10
v9.6-ESV-R10-P1
v9.6-ESV-R10b1
v9.6-ESV-R10rc1
v9.6-ESV-R10rc2
v9.6-ESV-R11
v9.6-ESV-R11b1
v9.6-ESV-R11rc1
v9.6-ESV-R11rc2
v9.6-ESV-R2
v9.6-ESV-R3
v9.6-ESV-R4
v9.6-ESV-R4-P1
v9.6-ESV-R4-P2
v9.6-ESV-R4-P3
v9.6-ESV-R5
v9.6-ESV-R5-P1
v9.6-ESV-R5b1
v9.6-ESV-R5rc1
v9.6-ESV-R6
v9.6-ESV-R6b1
v9.6-ESV-R6rc1
v9.6-ESV-R6rc2
v9.6-ESV-R7
v9.6-ESV-R7-P1
v9.6-ESV-R7-P2
v9.6-ESV-R7-P3
v9.6-ESV-R7-P4
v9.6-ESV-R8
v9.6-ESV-R8b1
v9.6-ESV-R9
v9.6-ESV-R9-P1
v9.6-ESV-R9b1
v9.6-ESV-R9b2
v9.6-ESV-R9rc1
v9.6-ESV-R9rc2
v9.6.0
v9.6.0-P1
v9.6.0a1
v9.6.0b1
v9.6.0rc1
v9.6.0rc2
v9.6.1
v9.6.1-P1
v9.6.1-P2
v9.6.1-P3
v9.6.1b1
v9.6.1rc1
v9.6.2
v9.6.2-P1
v9.6.2-P2
v9.6.2-P3
v9.6.2b1
v9.6.2rc1
v9.6.3
v9.6.3b1
v9.6.3rc1
v9.7.0
v9.7.0-P1
v9.7.0-P2
v9.7.0a1
v9.7.0a2
v9.7.0a3
v9.7.0b1
v9.7.0b2
v9.7.0b3
v9.7.0rc1
v9.7.0rc2
v9.7.1
v9.7.1-P1
v9.7.1-P2
v9.7.1b1
v9.7.1rc1
v9.7.2
v9.7.2-P1
v9.7.2-P2
v9.7.2-P3
v9.7.2b1
v9.7.2rc1
v9.7.3
v9.7.3-P1
v9.7.3-P2
v9.7.3-P3
v9.7.3b1
v9.7.3rc1
v9.7.4
v9.7.4-P1
v9.7.4b1
v9.7.4rc1
v9.7.5
v9.7.5-W1
v9.7.5b1
v9.7.5rc1
v9.7.5rc2
v9.7.6
v9.7.6-P1
v9.7.6-P2
v9.7.6-P3
v9.7.6-P4
v9.7.7
v9.7.7b1
v9.7.7rc1
v9.8.0
v9.8.0-P1
v9.8.0-P2
v9.8.0-P3
v9.8.0-P4
v9.8.0a1
v9.8.0b1
v9.8.0rc1
v9.8.1
v9.8.1-P1
v9.8.1b1
v9.8.1b2
v9.8.1b3
v9.8.1rc1
v9.8.2
v9.8.2-W1
v9.8.2b1
v9.8.2rc1
v9.8.2rc2
v9.8.3
v9.8.3-P1
v9.8.3-P2
v9.8.3-P3
v9.8.3-P4
v9.8.4
v9.8.4-P1
v9.8.4-P2
v9.8.4b1
v9.8.4rc1
v9.8.5
v9.8.5-P1
v9.8.5-P2
v9.8.5b1
v9.8.5b2
v9.8.5rc1
v9.8.5rc2
v9.8.6
v9.8.6-P1
v9.8.6-P2
v9.8.6b1
v9.8.6rc1
v9.8.6rc2
v9.8.7
v9.8.7-P1
v9.8.7-W1
v9.8.7b1
v9.8.7rc1
v9.8.7rc2
v9.8.8
v9.8.8b1
v9.8.8b2
v9.8.8rc1
v9.8.8rc2
v9.8.9-P2
v9.9-ESV-R10-P2
v9.9.0
v9.9.0-W1
v9.9.0a1
v9.9.0a2
v9.9.0a3
v9.9.0b1
v9.9.0b2
v9.9.0rc1
v9.9.0rc2
v9.9.0rc3
v9.9.0rc4
v9.9.1
v9.9.1-P1
v9.9.1-P2
v9.9.1-P3
v9.9.1-P4
v9.9.2
v9.9.2-P1
v9.9.2-P2
v9.9.2b1
v9.9.2rc1
v9.9.3b1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8616.json"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.12.4-p2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.11.5-s3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.11.5-s5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.11.7-s1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.11.8-s1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.0"
            }
        ]
    }
]