Skip to content
OpenAdvisories
High DLA-2355-1 2 CVEs

bind9 - security update

Published Aug 29, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 bind9 1:9.10.3.dfsg.P4-12.3+deb9u7

Vulnerabilities 2

  • High 7.5
    CVE-2020-8623

    A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c

    In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulner…

    ISC BIND9 bind9 bind9 Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2020-8622

    A truncated TSIG response can lead to an assertion failure

    In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, co…

    ISC BIND9 bind9 bind9 Debian Ubuntu Alpine