CVE-2020-8622

21.08.2020, 21:15

In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, could send a truncated response to that request, triggering an assertion failure, causing the server to exit. Alternately, an off-path attacker would have to correctly guess when a TSIG-signed request was sent, along with other characteristics of the packet and message, and spoof a truncated response to trigger an assertion failure, causing the server to exit.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.5 MEDIUM	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 85%

Affected Products (NVD)

Vendor	Product	Version
isc	bind	9.0.0 ≤ 𝑥 ≤ 9.11.21
isc	bind	9.12.0 ≤ 𝑥 ≤ 9.16.5
isc	bind	9.17.0 ≤ 𝑥 ≤ 9.17.3
isc	bind	9.9.3:s1
isc	bind	9.11.21:s1
debian	debian_linux	9.0
debian	debian_linux	10.0
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	16.04
canonical	ubuntu_linux	18.04
canonical	ubuntu_linux	20.04
netapp	steelstore_cloud_integrated_storage	-
opensuse	leap	15.1
opensuse	leap	15.2
synology	dns_server	𝑥 < 2.2.2-5028
oracle	communications_diameter_signaling_router	8.0.0 ≤ 𝑥 ≤ 8.5.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

bind9

bookworm	1:9.18.28-1~deb12u2 fixed
bookworm (security)	1:9.18.28-1~deb12u2 fixed
bullseye	1:9.16.50-1~deb11u2 fixed
bullseye (security)	1:9.16.50-1~deb11u1 fixed
sid	1:9.20.2-1 fixed
trixie	1:9.20.2-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

bind9

bionic	Fixed 1:9.11.3+dfsg-1ubuntu1.13 released
focal	Fixed 1:9.16.1-0ubuntu2.3 released
trusty	Fixed 1:9.9.5.dfsg-3ubuntu0.19+esm3 released
xenial	Fixed 1:9.10.3.dfsg.P4-8ubuntu1.17 released

openSUSE / SLES Releases

openSUSE Product

Release

bind

suse enterprise sap 12 SP5	9.11.22-3.22.1 fixed
suse enterprise sap 15 SP1	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP2	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP3	9.16.6-20.39 fixed
suse enterprise sap 15 SP4	9.16.20-150400.3.6 fixed
suse enterprise sap 15 SP7	9.20.3-150700.1.6 fixed
suse enterprise server 12 SP4	9.11.22-3.22.1 fixed
suse enterprise server 12 SP5	9.11.22-3.22.1 fixed
suse enterprise server 15	9.16.6-12.32.1 fixed
suse enterprise server 15 SP1	9.16.6-12.32.1 fixed
suse enterprise server 15 SP2	9.16.6-12.32.1 fixed
suse enterprise server 15 SP3	9.16.6-20.39 fixed
suse enterprise server 15 SP4	9.16.20-150400.3.6 fixed
suse enterprise server 15 SP7	9.20.3-150700.1.6 fixed

bind-chrootenv

suse enterprise sap 12 SP5	9.11.22-3.22.1 fixed
suse enterprise sap 15 SP1	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP2	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP3	9.16.6-20.39 fixed
suse enterprise server 12 SP4	9.11.22-3.22.1 fixed
suse enterprise server 12 SP5	9.11.22-3.22.1 fixed
suse enterprise server 15	9.16.6-12.32.1 fixed
suse enterprise server 15 SP1	9.16.6-12.32.1 fixed
suse enterprise server 15 SP2	9.16.6-12.32.1 fixed
suse enterprise server 15 SP3	9.16.6-20.39 fixed

bind-devel

suse enterprise desktop 15 SP1	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP2	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP3	9.16.6-20.39 fixed
suse enterprise desktop 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise sap 15 SP1	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP2	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP3	9.16.6-20.39 fixed
suse enterprise sap 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise server 15	9.16.6-12.32.1 fixed
suse enterprise server 15 SP1	9.16.6-12.32.1 fixed
suse enterprise server 15 SP2	9.16.6-12.32.1 fixed
suse enterprise server 15 SP3	9.16.6-20.39 fixed
suse enterprise server 15 SP5	9.16.6-150300.22.27.1 fixed

bind-doc

suse enterprise sap 12 SP5	9.11.22-3.22.1 fixed
suse enterprise sap 15 SP1	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP2	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP3	9.16.6-20.39 fixed
suse enterprise sap 15 SP4	9.16.20-150400.3.6 fixed
suse enterprise sap 15 SP7	9.20.3-150700.1.6 fixed
suse enterprise server 12 SP4	9.11.22-3.22.1 fixed
suse enterprise server 12 SP5	9.11.22-3.22.1 fixed
suse enterprise server 15	9.16.6-12.32.1 fixed
suse enterprise server 15 SP1	9.16.6-12.32.1 fixed
suse enterprise server 15 SP2	9.16.6-12.32.1 fixed
suse enterprise server 15 SP3	9.16.6-20.39 fixed
suse enterprise server 15 SP4	9.16.20-150400.3.6 fixed
suse enterprise server 15 SP7	9.20.3-150700.1.6 fixed

bind-utils

suse enterprise desktop 15 SP1	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP2	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP3	9.16.6-20.39 fixed
suse enterprise desktop 15 SP4	9.16.20-150400.3.6 fixed
suse enterprise desktop 15 SP5	9.16.38-150400.5.20.2 fixed
suse enterprise desktop 15 SP6	9.18.24-150600.1.5 fixed
suse enterprise desktop 15 SP7	9.20.3-150700.1.6 fixed
suse enterprise sap 12 SP5	9.11.22-3.22.1 fixed
suse enterprise sap 15 SP1	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP2	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP3	9.16.6-20.39 fixed
suse enterprise sap 15 SP4	9.16.20-150400.3.6 fixed
suse enterprise sap 15 SP5	9.16.38-150400.5.20.2 fixed
suse enterprise sap 15 SP6	9.18.24-150600.1.5 fixed
suse enterprise sap 15 SP7	9.20.3-150700.1.6 fixed
suse enterprise server 12 SP4	9.11.22-3.22.1 fixed
suse enterprise server 12 SP5	9.11.22-3.22.1 fixed
suse enterprise server 15	9.16.6-12.32.1 fixed
suse enterprise server 15 SP1	9.16.6-12.32.1 fixed
suse enterprise server 15 SP2	9.16.6-12.32.1 fixed
suse enterprise server 15 SP3	9.16.6-20.39 fixed
suse enterprise server 15 SP4	9.16.20-150400.3.6 fixed
suse enterprise server 15 SP5	9.16.38-150400.5.20.2 fixed
suse enterprise server 15 SP6	9.18.24-150600.1.5 fixed
suse enterprise server 15 SP7	9.20.3-150700.1.6 fixed

libbind9-1600

suse enterprise desktop 15 SP1	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP2	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP3	9.16.6-20.39 fixed
suse enterprise desktop 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise sap 15 SP1	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP2	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP3	9.16.6-20.39 fixed
suse enterprise sap 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise server 15	9.16.6-12.32.1 fixed
suse enterprise server 15 SP1	9.16.6-12.32.1 fixed
suse enterprise server 15 SP2	9.16.6-12.32.1 fixed
suse enterprise server 15 SP3	9.16.6-20.39 fixed
suse enterprise server 15 SP5	9.16.6-150300.22.27.1 fixed

libbind9-161

suse enterprise sap 12 SP5	9.11.22-3.22.1 fixed
suse enterprise server 12 SP4	9.11.22-3.22.1 fixed
suse enterprise server 12 SP5	9.11.22-3.22.1 fixed

libdns1110

suse enterprise sap 12 SP5	9.11.22-3.22.1 fixed
suse enterprise server 12 SP4	9.11.22-3.22.1 fixed
suse enterprise server 12 SP5	9.11.22-3.22.1 fixed

libdns1605

suse enterprise desktop 15 SP1	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP2	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP3	9.16.6-20.39 fixed
suse enterprise desktop 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise desktop 15 SP6	9.16.6-150300.22.41.1 fixed
suse enterprise desktop 15 SP7	9.16.6-150300.22.50.1 fixed
suse enterprise sap 15 SP1	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP2	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP3	9.16.6-20.39 fixed
suse enterprise sap 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise sap 15 SP6	9.16.6-150300.22.41.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.50.1 fixed
suse enterprise server 15	9.16.6-12.32.1 fixed
suse enterprise server 15 SP1	9.16.6-12.32.1 fixed
suse enterprise server 15 SP2	9.16.6-12.32.1 fixed
suse enterprise server 15 SP3	9.16.6-20.39 fixed
suse enterprise server 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.41.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.50.1 fixed

libirs-devel

suse enterprise desktop 15 SP1	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP2	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP3	9.16.6-20.39 fixed
suse enterprise desktop 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise desktop 15 SP6	9.16.6-150300.22.41.1 fixed
suse enterprise desktop 15 SP7	9.16.6-150300.22.50.1 fixed
suse enterprise sap 15 SP1	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP2	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP3	9.16.6-20.39 fixed
suse enterprise sap 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise sap 15 SP6	9.16.6-150300.22.41.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.50.1 fixed
suse enterprise server 15	9.16.6-12.32.1 fixed
suse enterprise server 15 SP1	9.16.6-12.32.1 fixed
suse enterprise server 15 SP2	9.16.6-12.32.1 fixed
suse enterprise server 15 SP3	9.16.6-20.39 fixed
suse enterprise server 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.41.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.50.1 fixed

libirs1601

suse enterprise desktop 15 SP1	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP2	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP3	9.16.6-20.39 fixed
suse enterprise desktop 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise desktop 15 SP6	9.16.6-150300.22.41.1 fixed
suse enterprise desktop 15 SP7	9.16.6-150300.22.50.1 fixed
suse enterprise sap 15 SP1	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP2	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP3	9.16.6-20.39 fixed
suse enterprise sap 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise sap 15 SP6	9.16.6-150300.22.41.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.50.1 fixed
suse enterprise server 15	9.16.6-12.32.1 fixed
suse enterprise server 15 SP1	9.16.6-12.32.1 fixed
suse enterprise server 15 SP2	9.16.6-12.32.1 fixed
suse enterprise server 15 SP3	9.16.6-20.39 fixed
suse enterprise server 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.41.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.50.1 fixed

libirs161

suse enterprise sap 12 SP5	9.11.22-3.22.1 fixed
suse enterprise server 12 SP4	9.11.22-3.22.1 fixed
suse enterprise server 12 SP5	9.11.22-3.22.1 fixed

libisc1107

suse enterprise sap 12 SP5	9.11.22-3.22.1 fixed
suse enterprise server 12 SP4	9.11.22-3.22.1 fixed
suse enterprise server 12 SP5	9.11.22-3.22.1 fixed

libisc1107-32bit

suse enterprise sap 12 SP5	9.11.22-3.22.1 fixed
suse enterprise server 12 SP4	9.11.22-3.22.1 fixed
suse enterprise server 12 SP5	9.11.22-3.22.1 fixed

libisc1606

suse enterprise desktop 15 SP1	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP2	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP3	9.16.6-20.39 fixed
suse enterprise desktop 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise desktop 15 SP6	9.16.6-150300.22.41.1 fixed
suse enterprise desktop 15 SP7	9.16.6-150300.22.50.1 fixed
suse enterprise sap 15 SP1	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP2	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP3	9.16.6-20.39 fixed
suse enterprise sap 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise sap 15 SP6	9.16.6-150300.22.41.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.50.1 fixed
suse enterprise server 15	9.16.6-12.32.1 fixed
suse enterprise server 15 SP1	9.16.6-12.32.1 fixed
suse enterprise server 15 SP2	9.16.6-12.32.1 fixed
suse enterprise server 15 SP3	9.16.6-20.39 fixed
suse enterprise server 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.41.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.50.1 fixed

libisccc1600

suse enterprise desktop 15 SP1	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP2	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP3	9.16.6-20.39 fixed
suse enterprise desktop 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise sap 15 SP1	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP2	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP3	9.16.6-20.39 fixed
suse enterprise sap 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise server 15	9.16.6-12.32.1 fixed
suse enterprise server 15 SP1	9.16.6-12.32.1 fixed
suse enterprise server 15 SP2	9.16.6-12.32.1 fixed
suse enterprise server 15 SP3	9.16.6-20.39 fixed
suse enterprise server 15 SP5	9.16.6-150300.22.27.1 fixed

libisccc161

suse enterprise sap 12 SP5	9.11.22-3.22.1 fixed
suse enterprise server 12 SP4	9.11.22-3.22.1 fixed
suse enterprise server 12 SP5	9.11.22-3.22.1 fixed

libisccfg1600

suse enterprise desktop 15 SP1	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP2	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP3	9.16.6-20.39 fixed
suse enterprise desktop 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise desktop 15 SP6	9.16.6-150300.22.41.1 fixed
suse enterprise desktop 15 SP7	9.16.6-150300.22.50.1 fixed
suse enterprise sap 15 SP1	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP2	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP3	9.16.6-20.39 fixed
suse enterprise sap 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise sap 15 SP6	9.16.6-150300.22.41.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.50.1 fixed
suse enterprise server 15	9.16.6-12.32.1 fixed
suse enterprise server 15 SP1	9.16.6-12.32.1 fixed
suse enterprise server 15 SP2	9.16.6-12.32.1 fixed
suse enterprise server 15 SP3	9.16.6-20.39 fixed
suse enterprise server 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.41.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.50.1 fixed

libisccfg163

suse enterprise sap 12 SP5	9.11.22-3.22.1 fixed
suse enterprise server 12 SP4	9.11.22-3.22.1 fixed
suse enterprise server 12 SP5	9.11.22-3.22.1 fixed

liblwres161

suse enterprise sap 12 SP5	9.11.22-3.22.1 fixed
suse enterprise server 12 SP4	9.11.22-3.22.1 fixed
suse enterprise server 12 SP5	9.11.22-3.22.1 fixed

libns1604

suse enterprise desktop 15 SP1	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP2	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP3	9.16.6-20.39 fixed
suse enterprise desktop 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise sap 15 SP1	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP2	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP3	9.16.6-20.39 fixed
suse enterprise sap 15 SP5	9.16.6-150300.22.27.1 fixed
suse enterprise server 15	9.16.6-12.32.1 fixed
suse enterprise server 15 SP1	9.16.6-12.32.1 fixed
suse enterprise server 15 SP2	9.16.6-12.32.1 fixed
suse enterprise server 15 SP3	9.16.6-20.39 fixed
suse enterprise server 15 SP5	9.16.6-150300.22.27.1 fixed

python-bind

suse enterprise sap 12 SP5	9.11.22-3.22.1 fixed
suse enterprise server 12 SP4	9.11.22-3.22.1 fixed
suse enterprise server 12 SP5	9.11.22-3.22.1 fixed

python3-bind

suse enterprise desktop 15 SP1	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP2	9.16.6-12.32.1 fixed
suse enterprise desktop 15 SP3	9.16.6-20.39 fixed
suse enterprise desktop 15 SP4	9.16.20-150400.3.6 fixed
suse enterprise desktop 15 SP5	9.16.38-150400.5.20.2 fixed
suse enterprise sap 15 SP1	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP2	9.16.6-12.32.1 fixed
suse enterprise sap 15 SP3	9.16.6-20.39 fixed
suse enterprise sap 15 SP4	9.16.20-150400.3.6 fixed
suse enterprise sap 15 SP5	9.16.38-150400.5.20.2 fixed
suse enterprise server 15	9.16.6-12.32.1 fixed
suse enterprise server 15 SP1	9.16.6-12.32.1 fixed
suse enterprise server 15 SP2	9.16.6-12.32.1 fixed
suse enterprise server 15 SP3	9.16.6-20.39 fixed
suse enterprise server 15 SP4	9.16.20-150400.3.6 fixed
suse enterprise server 15 SP5	9.16.38-150400.5.20.2 fixed

sysuser-shadow

suse enterprise desktop 15 SP1	2.0-4.2.8 fixed
suse enterprise desktop 15 SP2	2.0-4.2.8 fixed
suse enterprise desktop 15 SP3	2.0-4.2.8 fixed
suse enterprise sap 15 SP1	2.0-4.2.8 fixed
suse enterprise sap 15 SP2	2.0-4.2.8 fixed
suse enterprise sap 15 SP3	2.0-4.2.8 fixed
suse enterprise server 15	2.0-4.2.8 fixed
suse enterprise server 15 SP1	2.0-4.2.8 fixed
suse enterprise server 15 SP2	2.0-4.2.8 fixed
suse enterprise server 15 SP3	2.0-4.2.8 fixed

sysuser-tools

suse enterprise desktop 15 SP1	2.0-4.2.8 fixed
suse enterprise sap 15 SP1	2.0-4.2.8 fixed
suse enterprise server 15	2.0-4.2.8 fixed
suse enterprise server 15 SP1	2.0-4.2.8 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

bind

RHEL 6	32:9.8.2-0.68.rc1.el6_10.8 fixed
RHEL 7	32:9.11.4-26.P2.el7_9.2 fixed
RHEL 8	32:9.11.20-5.el8 fixed

bind-chroot

RHEL 6	32:9.8.2-0.68.rc1.el6_10.8 fixed
RHEL 7	32:9.11.4-26.P2.el7_9.2 fixed
RHEL 8	32:9.11.20-5.el8 fixed

bind-devel

RHEL 6	32:9.8.2-0.68.rc1.el6_10.8 fixed
RHEL 7	32:9.11.4-26.P2.el7_9.2 fixed
RHEL 8	32:9.11.20-5.el8 fixed

bind-export-devel

RHEL 7	32:9.11.4-26.P2.el7_9.2 fixed
RHEL 8	32:9.11.20-5.el8 fixed

bind-export-libs

RHEL 7	32:9.11.4-26.P2.el7_9.2 fixed
RHEL 8	32:9.11.20-5.el8 fixed

bind-libs

RHEL 6	32:9.8.2-0.68.rc1.el6_10.8 fixed
RHEL 7	32:9.11.4-26.P2.el7_9.2 fixed
RHEL 8	32:9.11.20-5.el8 fixed

bind-libs-lite

RHEL 7	32:9.11.4-26.P2.el7_9.2 fixed
RHEL 8	32:9.11.20-5.el8 fixed

bind-license

RHEL 7	32:9.11.4-26.P2.el7_9.2 fixed
RHEL 8	32:9.11.20-5.el8 fixed

bind-lite-devel

RHEL 7	32:9.11.4-26.P2.el7_9.2 fixed
RHEL 8	32:9.11.20-5.el8 fixed

bind-pkcs11

RHEL 7	32:9.11.4-26.P2.el7_9.2 fixed
RHEL 8	32:9.11.20-5.el8 fixed

bind-pkcs11-devel

RHEL 7	32:9.11.4-26.P2.el7_9.2 fixed
RHEL 8	32:9.11.20-5.el8 fixed

bind-pkcs11-libs

RHEL 7	32:9.11.4-26.P2.el7_9.2 fixed
RHEL 8	32:9.11.20-5.el8 fixed

bind-pkcs11-utils

RHEL 7	32:9.11.4-26.P2.el7_9.2 fixed
RHEL 8	32:9.11.20-5.el8 fixed

bind-sdb

RHEL 6	32:9.8.2-0.68.rc1.el6_10.8 fixed
RHEL 7	32:9.11.4-26.P2.el7_9.2 fixed
RHEL 8	32:9.11.20-5.el8 fixed

bind-sdb-chroot

RHEL 7	32:9.11.4-26.P2.el7_9.2 fixed
RHEL 8	32:9.11.20-5.el8 fixed

bind-utils

RHEL 6	32:9.8.2-0.68.rc1.el6_10.8 fixed
RHEL 7	32:9.11.4-26.P2.el7_9.2 fixed
RHEL 8	32:9.11.20-5.el8 fixed

python3-bind

RHEL 8

32:9.11.20-5.el8

fixed

Common Weakness Enumeration

CWE-617 - Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html

https://kb.isc.org/docs/cve-2020-8622

https://lists.debian.org/debian-lts-announce/2020/08/msg00053.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DQN62GBMCIC5AY4KYADGXNKVY6AJKSJE/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKAMJZXR66P6S5LEU4SN7USSNCWTXEXP/

https://security.gentoo.org/glsa/202008-19

https://security.netapp.com/advisory/ntap-20200827-0003/

https://usn.ubuntu.com/4468-1/

https://usn.ubuntu.com/4468-2/

https://www.debian.org/security/2020/dsa-4752

https://www.oracle.com/security-alerts/cpuoct2021.html

https://www.synology.com/security/advisory/Synology_SA_20_19