Oval Definition:oval:com.redhat.rhsa:def:20202383
Revision Date:2020-06-03Version:635
Title:RHSA-2020:2383: bind security update (Important)
Description:The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND does not sufficiently limit the number of fetches performed when processing referrals (CVE-2020-8616)

  • bind: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c (CVE-2020-8617)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2020-8616
    CVE-2020-8617
    RHSA-2020:2383
    Platform(s):Red Hat Enterprise Linux 6
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND
  • bind is earlier than 32:9.8.2-0.68.rc1.el6_10.7
  • AND bind is signed with Red Hat redhatrelease2 key
  • bind-chroot is earlier than 32:9.8.2-0.68.rc1.el6_10.7
  • AND bind-chroot is signed with Red Hat redhatrelease2 key
  • bind-devel is earlier than 32:9.8.2-0.68.rc1.el6_10.7
  • AND bind-devel is signed with Red Hat redhatrelease2 key
  • bind-libs is earlier than 32:9.8.2-0.68.rc1.el6_10.7
  • AND bind-libs is signed with Red Hat redhatrelease2 key
  • bind-sdb is earlier than 32:9.8.2-0.68.rc1.el6_10.7
  • AND bind-sdb is signed with Red Hat redhatrelease2 key
  • bind-utils is earlier than 32:9.8.2-0.68.rc1.el6_10.7
  • AND bind-utils is signed with Red Hat redhatrelease2 key
  • BACK