CVE:CVE-2020-8620
CNNVD:CNNVD-202008-1022
Internet Systems Consortium BIND server  9.15.6版本至9.16.5版本，9.17.0版本至 9.17.3版本中存在安全漏洞，该漏洞源于在通过libuv流量处理TCP流量时，如果对该服务器的TCP端口（用于处理较大的DNS请求（AXFR））发送大量数据包，程序会将长度值传入到服务器，造成断言失败。攻击者可通过向该端口发送大量未认证的数据包利用该漏洞造成拒绝服务。
solution:Upgrade isc bind to a higher version than 9.16.5,9.17.3,9.9.12:s1,9.9.13:s1,9.11.3:s1,9.11.21:s1,and avoid the version [9.15.6,9.16.5],[9.17.0,9.17.3],9.9.12:s1,9.9.13:s1,9.11.3:s1,9.11.21:s1; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -; Upgrade canonical ubuntu_linux to a higher version than 12.04,16.04,18.04,and avoid the version 12.04,16.04,18.04