CVE-2020-8616: BIND does not sufficiently limit the number of fetches performed when processing referrals CVE-2020-8617: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c More info on the referral problem in http://www.nxnsattack.com/dns-ns-paper.pdf