CVE-2021-25217

🗓️ 26 May 2021 22:10:11Reported by iscType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 524 Views

ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 vulnerabilit

Reporter	Title	Published	Views	Family All 203
IBM Security Bulletins	Security Bulletin: TS4500 is affected by CVE-2021-25217	13 Oct 202101:39	–	ibm
IBM Security Bulletins	Security Bulletin: ISC DHCP for IBM i is affected by CVE-2021-25217	17 Sep 202121:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affect IBM Cloud Foundry Migration Runtime	13 Oct 202114:44	–	ibm
Tenable Nessus	Amazon Linux 2 : dhcp (ALAS-2021-1654)	23 Jun 202100:00	–	nessus
Tenable Nessus	Amazon Linux AMI : dhcp (ALAS-2021-1510)	13 Jul 202100:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0041: dhcp (ALINUX3-SA-2021:0041)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : dhcp (ALSA-2021:2359)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 7 : dhcp (RHSA-2021:2357)	14 Jun 202100:00	–	nessus
Tenable Nessus	Debian DLA-2674-1 : isc-dhcp security update	4 Jun 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : dhcp (EulerOS-SA-2021-2077)	2 Jul 202100:00	–	nessus

NVD

Node

isc dhcpRange4.4.0–4.4.2

isc dhcpMatch4.1-esvr1

isc dhcpMatch4.1-esvr10

isc dhcpMatch4.1-esvr10_b1

isc dhcpMatch4.1-esvr10_rc1

isc dhcpMatch4.1-esvr10b1

isc dhcpMatch4.1-esvr10rc1

isc dhcpMatch4.1-esvr11

isc dhcpMatch4.1-esvr11_b1

isc dhcpMatch4.1-esvr11_rc1

isc dhcpMatch4.1-esvr11_rc2

isc dhcpMatch4.1-esvr11b1

isc dhcpMatch4.1-esvr11rc1

isc dhcpMatch4.1-esvr11rc2

isc dhcpMatch4.1-esvr12

isc dhcpMatch4.1-esvr12-p1

isc dhcpMatch4.1-esvr12_b1

isc dhcpMatch4.1-esvr12_p1

isc dhcpMatch4.1-esvr12b1

isc dhcpMatch4.1-esvr13

isc dhcpMatch4.1-esvr13_b1

isc dhcpMatch4.1-esvr13b1

isc dhcpMatch4.1-esvr14

isc dhcpMatch4.1-esvr14_b1

isc dhcpMatch4.1-esvr14b1

isc dhcpMatch4.1-esvr15

isc dhcpMatch4.1-esvr15-p1

isc dhcpMatch4.1-esvr15_b1

isc dhcpMatch4.1-esvr16

Node

fedoraproject fedoraMatch33

fedoraproject fedoraMatch34

Node

debian debian_linuxMatch9.0

Node

siemens ruggedcom_rox_rx1400_firmwareRange<2.15.0

AND

siemens ruggedcom_rox_rx1400Match-

Node

siemens ruggedcom_rox_rx1500_firmwareRange2.3.0–2.15.0

AND

siemens ruggedcom_rox_rx1500Match-

Node

siemens ruggedcom_rox_rx1501_firmwareRange2.3.0–2.15.0

AND

siemens ruggedcom_rox_rx1501Match-

Node

siemens ruggedcom_rox_rx1510_firmwareRange2.3.0–2.15.0

AND

siemens ruggedcom_rox_rx1510Match-

Node

siemens ruggedcom_rox_rx1511_firmwareRange2.3.0–2.15.0

AND

siemens ruggedcom_rox_rx1511Match-

Node

siemens ruggedcom_rox_rx1512_firmwareRange2.3.0–2.15.0

AND

siemens ruggedcom_rox_rx1512Match-

Node

siemens ruggedcom_rox_rx1524_firmwareRange<2.15.0

AND

siemens ruggedcom_rox_rx1524Match-

Node

siemens ruggedcom_rox_rx1536_firmwareRange<2.15.0

AND

siemens ruggedcom_rox_rx1536Match-

Node

siemens ruggedcom_rox_rx5000_firmwareRange2.3.0–2.15.0

AND

siemens ruggedcom_rox_rx5000Match-

Node

siemens ruggedcom_rox_mx5000_firmwareRange2.3.0–2.15.0

AND

siemens ruggedcom_rox_mx5000Match-

Node

netapp ontap_select_deploy_administration_utilityMatch-

netapp solidfire_&_hci_management_nodeMatch-

Node

siemens sinec_insRange<1.0

siemens sinec_insMatch1.0-

siemens sinec_insMatch1.0sp1

[
  {
    "vendor": "ISC",
    "product": "ISC DHCP",
    "versions": [
      {
        "version": "4.1 ESV",
        "status": "affected",
        "lessThan": "4.1-ESV-R16-P1",
        "versionType": "custom"
      },
      {
        "version": "4.4",
        "status": "affected",
        "lessThan": "4.4.2-P1",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
kb	www.kb.isc.org/docs/cve-2021-25217
lists	www.lists.debian.org/debian-lts-announce/2021/06/msg00002.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
openwall	www.openwall.com/lists/oss-security/2021/05/26/6
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-406691.pdf
security	www.security.netapp.com/advisory/ntap-20220325-0011/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5QI4DYC7J4BGHEW3NH4XHMWTHYC36UK4/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2LB42JWIV4M4WDNXX5VGIP26FEYWKIF/
security	www.security.gentoo.org/glsa/202305-22

21 Nov 2024 05:54Current

7.7High risk

Vulners AI Score7.7

CVSS 23.3

CVSS 3.17.4

EPSS0.0045

CWE-119