CVE:CVE-2020-8625
CNNVD:CNNVD-202102-1310
ISC BIND是美国ISC公司的一套实现了DNS协议的开源软件。
ISC BIND 存在安全漏洞，该漏洞源于通过显式地为tkey-gssapi-keytab或tkey-gssapi-credentialconfiguration选项设置有效值，服务器可能会变得脆弱。
solution:Upgrade isc bind to a higher version than 9.11.27,9.16.11,9.11.3:s1,9.11.5:s3,9.11.5:s5,9.11.6:s1,9.11.7:s1,9.11.8:s1,9.11.21:s1,9.11.27:s1,9.16.8:s1,9.16.11:s1,9.17.0,9.17.1,and avoid the version [9.5.0,9.11.27],[9.12.0,9.16.11],9.11.3:s1,9.11.5:s3,9.11.5:s5,9.11.6:s1,9.11.7:s1,9.11.8:s1,9.11.21:s1,9.11.27:s1,9.16.8:s1,9.16.11:s1,9.17.0,9.17.1; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade fedoraproject fedora to a higher version than 32,33,34,and avoid the version 32,33,34; Upgrade siemens sinec_infrastructure_network_services to a higher version than 1.0.1.1,and avoid the version (,1.0.1.1); Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp a250_firmware to a higher version than -; Upgrade netapp 500f_firmware to a higher version than -