It was discovered that Bind incorrectly handled large responses during zone transfers. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. (CVE-2020-8618)
It was discovered that Bind incorrectly handled certain asterisk characters in zone files. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. (CVE-2020-8619)
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "1:9.16.1-0ubuntu2.2",
"binary_name": "bind9"
},
{
"binary_version": "1:9.16.1-0ubuntu2.2",
"binary_name": "bind9-dnsutils"
},
{
"binary_version": "1:9.16.1-0ubuntu2.2",
"binary_name": "bind9-host"
},
{
"binary_version": "1:9.16.1-0ubuntu2.2",
"binary_name": "bind9-libs"
},
{
"binary_version": "1:9.16.1-0ubuntu2.2",
"binary_name": "bind9-utils"
},
{
"binary_version": "1:9.16.1-0ubuntu2.2",
"binary_name": "bind9utils"
},
{
"binary_version": "1:9.16.1-0ubuntu2.2",
"binary_name": "dnsutils"
}
]
}
{
"ecosystem": "Ubuntu:20.04:LTS",
"cves": [
{
"id": "CVE-2020-8618",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2020-8619",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
]
}