Summary
[32:9.11.20-5.1]
- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)
Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bind | 32:9.11.20-5.el8_3.1 |
| Oracle Linux · 8 | bind-chroot | 32:9.11.20-5.el8_3.1 |
| Oracle Linux · 8 | bind-devel | 32:9.11.20-5.el8_3.1 |
| Oracle Linux · 8 | bind-export-devel | 32:9.11.20-5.el8_3.1 |
| Oracle Linux · 8 | bind-export-libs | 32:9.11.20-5.el8_3.1 |
| Oracle Linux · 8 | bind-libs | 32:9.11.20-5.el8_3.1 |
| Oracle Linux · 8 | bind-libs-lite | 32:9.11.20-5.el8_3.1 |
| Oracle Linux · 8 | bind-license | 32:9.11.20-5.el8_3.1 |
| Oracle Linux · 8 | bind-lite-devel | 32:9.11.20-5.el8_3.1 |
| Oracle Linux · 8 | bind-pkcs11 | 32:9.11.20-5.el8_3.1 |
| Oracle Linux · 8 | bind-pkcs11-devel | 32:9.11.20-5.el8_3.1 |
| Oracle Linux · 8 | bind-pkcs11-libs | 32:9.11.20-5.el8_3.1 |
| Oracle Linux · 8 | bind-pkcs11-utils | 32:9.11.20-5.el8_3.1 |
| Oracle Linux · 8 | bind-sdb | 32:9.11.20-5.el8_3.1 |
| Oracle Linux · 8 | bind-sdb-chroot | 32:9.11.20-5.el8_3.1 |
| Oracle Linux · 8 | bind-utils | 32:9.11.20-5.el8_3.1 |
| Oracle Linux · 8 | python3-bind | 32:9.11.20-5.el8_3.1 |
Vulnerabilities 1
-
High 8.1CVE-2020-8625 EPSS 65%
A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack
BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed, but a server can be rendered vulnerable by explicit…