All vulnerabilities

Servers and applications

CVE-2020-8616

A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause a recursing server to issue a very large number of fetches in an attempt to process the referral. This has at least two potential effects: The performance of the recursing server can potentially be…

Severity
High 8.6
Published
19 May 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
BIND 9Servers and applications · cpe:a:isc:bind
  • From 9.17.0 up to 9.17.1
  • From 9.16.0 up to 9.16.2
  • From 9.15.0 up to 9.15.6
  • From 9.14.0 up to 9.14.11
All 18 release lines
  • From 9.0.0 up to 9.11.18
  • Version 9.9.3-s1
  • Version 9.10.5-s1
  • Version 9.10.7-s1
  • Version 9.11.3-s1
  • Version 9.11.5-s3
  • Version 9.11.5-s5
  • Version 9.11.6-s1
  • Version 9.11.7-s1
  • Version 9.11.8-s1
  • From 9.12.0 up to 9.12.4
  • Version 9.12.4-p1
  • Version 9.12.4-p2
  • From 9.13.0 up to 9.13.7
  • From 9.14.0 up to 9.14.11
  • From 9.15.0 up to 9.15.6
  • From 9.16.0 up to 9.16.2
  • From 9.17.0 up to 9.17.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-8616
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-8616