A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause a recursing server to issue a very large number of fetches in an attempt to process the referral. This has at least two potential effects: The performance of the recursing server can potentially be degraded by the additional work required to perform these fetches, and The attacker can exploit this behavior to use the recursing server as a reflector in a reflection attack with a high amplification factor.(CVE-2020-8616)

Using a specially crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. In releases of BIND dating from March 2018 and after, an assertion check in tsig.c detects this inconsistent state and deliberately exits. Prior to the introduction of the check the server would continue operating in an inconsistent state, with potentially harmful results.(CVE-2020-8617)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2404 advisory.

  - bind: BIND does not sufficiently limit the number of fetches performed when processing referrals     (CVE-2020-8616)

  - bind: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in     tsig.c (CVE-2020-8617)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2383 advisory.

  - bind: BIND does not sufficiently limit the number of     fetches performed when processing referrals     (CVE-2020-8616)

  - bind: A logic error in code which checks TSIG validity     can be used to trigger an assertion failure in tsig.c     (CVE-2020-8617)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - bind: BIND does not sufficiently limit the number of     fetches performed when processing referrals     (CVE-2020-8616)

  - bind: A logic error in code which checks TSIG validity     can be used to trigger an assertion failure in tsig.c     (CVE-2020-8617)

This update for bind fixes the following issues :

Amended documentation referring to rule types 'krb5-subdomain' and 'ms-subdomain'. This incorrect documentation could mislead operators into believing that policies they had configured were more restrictive than they actually were. [CVE-2018-5741]

Further limit the number of queries that can be triggered from a request. Root and TLD servers are no longer exempt from max-recursion-queries. Fetches for missing name server address records are limited to 4 for any domain. [CVE-2020-8616]

Replaying a TSIG BADTIME response as a request could trigger an assertion failure. [CVE-2020-8617] [bsc#1109160, bsc#1171740, CVE-2018-5741, bind-CVE-2018-5741.patch, CVE-2020-8616, bind-CVE-2020-8616.patch, CVE-2020-8617, bind-CVE-2020-8617.patch]

Don't rely on /etc/insserv.conf anymore for proper dependencies against nss-lookup.target in named.service and lwresd.service (bsc#1118367 bsc#1118368)

Using a drop-in file

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3379 advisory.

  - bind: BIND does not sufficiently limit the number of fetches performed when processing referrals     (CVE-2020-8616)

  - bind: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in     tsig.c (CVE-2020-8617)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3272 advisory.

  - bind: BIND does not sufficiently limit the number of fetches performed when processing referrals     (CVE-2020-8616)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2020-0021 for details.

ID	Name	Product	Family	Published	Updated	Severity
137092	Amazon Linux AMI : bind (ALAS-2020-1369)	Nessus	Amazon Linux Local Security Checks	6/4/2020	3/8/2024	high
137139	RHEL 8 : bind (RHSA-2020:2404)	Nessus	Red Hat Local Security Checks	6/5/2020	3/7/2024	high
137151	CentOS 6 : bind (CESA-2020:2383)	Nessus	CentOS Local Security Checks	6/5/2020	3/7/2024	high
137174	Scientific Linux Security Update : bind on SL6.x i386/x86_64 (20200603)	Nessus	Scientific Linux Local Security Checks	6/5/2020	3/7/2024	high
138545	SUSE SLES12 Security Update : bind (SUSE-SU-2020:1914-1)	Nessus	SuSE Local Security Checks	7/16/2020	1/13/2021	medium
139466	RHEL 6 : bind (RHSA-2020:3379)	Nessus	Red Hat Local Security Checks	8/10/2020	2/26/2024	high
139286	RHEL 7 : bind (RHSA-2020:3272)	Nessus	Red Hat Local Security Checks	8/3/2020	4/28/2024	high
164595	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.18)	Nessus	Misc.	9/1/2022	3/13/2024	critical
137170	OracleVM 3.3 / 3.4 : bind (OVMSA-2020-0021)	Nessus	OracleVM Local Security Checks	6/5/2020	3/7/2024	medium

Detections

Analytics

Plugins Search

high

high

high

high

medium

high

high

critical

medium