{"vulnerability": "cve-2020-8616", "sightings": [{"uuid": "85b6a78b-a37b-437c-9460-99b783d0922e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-8616", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/kaksi-haavoittuvuutta-isc-bind-9-nimipalvelimessa", "content": "", "creation_timestamp": "2026-03-17T14:46:26.067729Z"}, {"uuid": "fb2d5e0d-205c-4eab-bdc8-ef1b81c9d2a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-8616", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/kaksi-haavoittuvuutta-isc-bind-9-nimipalvelimessa", "content": "", "creation_timestamp": "2020-05-22T07:53:40.000000Z"}, {"uuid": "688f87fd-0944-49a5-8608-167993a9084d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-8616", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/1149", "content": "#exploit\nNXNSAttack DNS\nhttps://en.blog.nic.cz/2020/05/19/nxnsattack-upgrade-resolvers-to-stop-new-kind-of-random-subdomain-attack\n\n1. CVE-2020-8616:\nBIND does not sufficiently limit the number of fetches performed when processing referrals\nhttps://kb.isc.org/docs/cve-2020-8616\n\n2. CVE-2020-12663:\nMalformed answers from upstream name servers can be used to make Unbound unresponsive\nhttps://nlnetlabs.nl/downloads/unbound/CVE-2020-12662_2020-12663.txt\n\n3. CVE-2020-12667:\nKnot Resolver <5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server\nhttps://www.openwall.com/lists/oss-security/2020/05/19/2\n\n4. CVE-2020-10995:\nPowerDNS Recursor 4.1 - 4.3 DoS (Security Advisory)\nhttps://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-01.html", "creation_timestamp": "2024-10-24T04:43:49.000000Z"}]}