bind: Multiple vulnerabilities (CVE-2020-8620, CVE-2020-8621, CVE-2020-8622, CVE-2020-8623, and CVE-2020-8624)ID: oval:org.secpod.oval:def:1801881 | Date: (C)2021-04-08 (M)2024-01-16 |
Class: PATCH | Family: unix |
In versions of BIND that use the libuv network manager (9.16.x is the only stable branch affected) an incorrectly specified maximum buffer size allows a specially crafted large TCP payload to trigger an assertion failure when it is received. Affected Versions: BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3. Fixed In Version: BIND 9.16.6, BIND 9.17.4
Platform: |
Alpine Linux 3.10 |
Alpine Linux 3.11 |
Alpine Linux 3.12 |
Alpine Linux 3.13 |