Skip to content
OpenAdvisories
High DLA-2568-1 1 CVE

bind9 - security update

Published Feb 19, 2021 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 9 bind9 1:9.10.3.dfsg.P4-12.3+deb9u8

Vulnerabilities 1

  • High 8.1
    CVE-2020-8625 EPSS 65%

    A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack

    BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed, but a server can be rendered vulnerable by explicit…