Skip to content
OpenAdvisories
High RHSA-2020:5011 3 CVEs

Red Hat Security Advisory: bind security and bug fix update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 63

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client bind 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client bind-chroot 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client bind-debuginfo 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client bind-devel 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client bind-export-devel 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client bind-export-libs 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client bind-libs 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client bind-libs-lite 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client bind-license 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client bind-lite-devel 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client bind-pkcs11 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client bind-pkcs11-devel 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client bind-pkcs11-libs 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client bind-pkcs11-utils 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client bind-sdb 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client bind-sdb-chroot 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client bind-utils 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::computenode bind 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-chroot 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-debuginfo 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-devel 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-export-devel 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-lite-devel 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-pkcs11 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-pkcs11-devel 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-pkcs11-libs 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-pkcs11-utils 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-sdb 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-sdb-chroot 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server bind 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server bind-chroot 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server bind-debuginfo 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server bind-devel 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server bind-export-devel 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server bind-export-libs 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server bind-libs 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server bind-libs-lite 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server bind-license 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server bind-lite-devel 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server bind-pkcs11 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server bind-pkcs11-devel 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server bind-pkcs11-libs 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server bind-pkcs11-utils 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server bind-sdb 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server bind-sdb-chroot 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server bind-utils 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bind 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-chroot 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-debuginfo 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-devel 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-export-devel 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-export-libs 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-libs 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-libs-lite 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-license 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-lite-devel 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-pkcs11 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-pkcs11-devel 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-pkcs11-libs 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-pkcs11-utils 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-sdb 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-sdb-chroot 32:9.11.4-26.P2.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-utils 32:9.11.4-26.P2.el7_9.2

Vulnerabilities 3

  • High 7.5
    CVE-2020-8623

    A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c

    In BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulner…

    ISC BIND9 bind9 bind9 Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2020-8622

    A truncated TSIG response can lead to an assertion failure

    In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, co…

    ISC BIND9 bind9 bind9 Debian Ubuntu Alpine
  • Medium 4.3
    CVE-2020-8624

    update-policy rules of type "subdomain" are enforced incorrectly

    In BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a sp…

    ISC BIND9 bind9 bind9 Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1869473
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1869477
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1869480
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1884530
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5011.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-8622
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-8622
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-8622
  • article
    https://kb.isc.org/docs/cve-2020-8622
  • report
    https://access.redhat.com/security/cve/CVE-2020-8623
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-8623
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-8623
  • article
    https://kb.isc.org/docs/cve-2020-8623
  • report
    https://access.redhat.com/security/cve/CVE-2020-8624
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-8624
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-8624
  • article
    https://kb.isc.org/docs/cve-2020-8624