It was discovered that Bind incorrectly handled large responses during zone transfers. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. (CVE-2020-8618)
It was discovered that Bind incorrectly handled certain asterisk characters in zone files. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. (CVE-2020-8619)
{ "binaries": [ { "binary_version": "1:9.16.1-0ubuntu2.2", "binary_name": "bind9" }, { "binary_version": "1:9.16.1-0ubuntu2.2", "binary_name": "bind9-dnsutils" }, { "binary_version": "1:9.16.1-0ubuntu2.2", "binary_name": "bind9-host" }, { "binary_version": "1:9.16.1-0ubuntu2.2", "binary_name": "bind9-libs" }, { "binary_version": "1:9.16.1-0ubuntu2.2", "binary_name": "bind9-utils" }, { "binary_version": "1:9.16.1-0ubuntu2.2", "binary_name": "bind9utils" }, { "binary_version": "1:9.16.1-0ubuntu2.2", "binary_name": "dnsutils" } ], "availability": "No subscription required" }
{ "ecosystem": "Ubuntu:20.04:LTS", "cves": [ { "id": "CVE-2020-8618", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "medium", "type": "Ubuntu" } ] }, { "id": "CVE-2020-8619", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "medium", "type": "Ubuntu" } ] } ] }