The vulnerability of the GSS-TSIG component of the BIND server, related to writing beyond the buffer boundaries in memory, allows an attacker to execute arbitrary code.

🗓️ 02 Jun 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 7 Views

GSS-TSIG flaw in Berkeley Internet Name Daemon enables buffer overflow and code execution.

Reporter	Title	Published	Views	Family All 128
ALT Linux	Security fix for the ALT Linux 10 package bind version 9.11.31-alt1	29 Apr 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package bind version 9.11.31-alt1	12 May 202100:00	–	altlinux
IBM Security Bulletins	Security Bulletin: A vulnerability in ISC BIND affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2021-25216)	12 Jan 202321:59	–	ibm
ATTACKERKB	CVE-2021-25216	28 Apr 202120:20	–	attackerkb
AlpineLinux	CVE-2021-25216	29 Apr 202100:55	–	alpinelinux
ArchLinux	[ASA-202104-10] bind: multiple issues	29 Apr 202100:00	–	archlinux
AstraLinux	Astra Linux – Vulnerability in bind9	20 May 202605:53	–	astralinux
Tenable Nessus	ISC BIND 9.5.0 < 9.11.31 / 9.11.3-S1 < 9.11.31-S1 / 9.12.0 < 9.16.15 / 9.16.8-S1 < 9.16.15-S1 / 9.17.0 <-> 9.17.1 Buffer Overflow (CVE-2021-25216)	6 May 202100:00	–	nessus
Tenable Nessus	ISC BIND GSS-TSIG SPNEGO Buffer Overflow (CVE-2021-25216)	30 Apr 202100:00	–	nessus
Tenable Nessus	Debian DLA-2647-1 : bind9 security update	5 May 202100:00	–	nessus

Vulners

Node

OR

novell suse_openstack_cloudMatch8

novell hpe_helion_openstackMatch8

internet_systems_consortium bindRange9.9.3-s1–9.11.29-s1

internet_systems_consortium bindRange9.16.8-s1–9.16.13-s1

internet_systems_consortium bindRange9.0.0–9.11.31

internet_systems_consortium bindRange9.12.0–9.16.15

internet_systems_consortium bindRange9.17.0–9.17.12

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-25216
redos	www.redos.red-soft.ru/updatesec/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-25216
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0114SE47
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20211019SE81
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021042903
opennet	www.opennet.ru/opennews/art.shtml

16 Sep 2024 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 26.8

CVSS 39.8

EPSS0.82367

transaction signature berkeley internet name buffer overflow arbitrary code execution