Lucene search

IscCVE-2021-25219

HistoryOct 27, 2021 - 9:15 p.m.

CVE-2021-25219

2021-10-2721:15:07

isc

web.nvd.nist.gov

622

cve-2021-25219

bind

response processing

flaw

security vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

5.6

Confidence

High

EPSS

0.007

Percentile

80.6%

JSON

In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing.

Affected configurations

Nvd

Node

iscbindRange9.3.0–9.11.36-

iscbindRange9.12.0–9.16.22-

iscbindRange9.17.0–9.17.19-

iscbindMatch9.9.3s1supported_preview

iscbindMatch9.9.12s1supported_preview

iscbindMatch9.9.13s1supported_preview

iscbindMatch9.10.5s1supported_preview

iscbindMatch9.10.7s1supported_preview

iscbindMatch9.11.3s1supported_preview

iscbindMatch9.11.5s3supported_preview

iscbindMatch9.11.5s5supported_preview

iscbindMatch9.11.5s6supported_preview

iscbindMatch9.11.6s1supported_preview

iscbindMatch9.11.7s1supported_preview

iscbindMatch9.11.8s1supported_preview

iscbindMatch9.11.12s1supported_preview

iscbindMatch9.11.21s1supported_preview

iscbindMatch9.11.27s1supported_preview

iscbindMatch9.11.29s1supported_preview

iscbindMatch9.11.35s1supported_preview

iscbindMatch9.16.8s1supported_preview

iscbindMatch9.16.11s1supported_preview

iscbindMatch9.16.13s1supported_preview

iscbindMatch9.16.21s1supported_preview

Node

debiandebian_linuxMatch9.0

debiandebian_linuxMatch10.0

debiandebian_linuxMatch11.0

Node

fedoraprojectfedoraMatch33

fedoraprojectfedoraMatch34

fedoraprojectfedoraMatch35

Node

netapph300s_firmwareMatch-

AND

netapph300sMatch-

Node

netapph500s_firmwareMatch-

AND

netapph500sMatch-

Node

netapph700s_firmwareMatch-

AND

netapph700sMatch-

Node

netapph300e_firmwareMatch-

AND

netapph300eMatch-

Node

netapph500e_firmwareMatch-

AND

netapph500eMatch-

Node

netapph700e_firmwareMatch-

AND

netapph700eMatch-

Node

netapph410s_firmwareMatch-

AND

netapph410sMatch-

Node

netapph410c_firmwareMatch-

AND

netapph410cMatch-

Node

netappcloud_backupMatch-

Node

siemenssinec_infrastructure_network_servicesRange<1.0.1.1

Node

oraclehttp_serverMatch12.2.1.3.0

oraclehttp_serverMatch12.2.1.4.0

oraclezfs_storage_appliance_kitMatch8.8

VendorProductVersionCPE
iscbind9.11.3cpe:/a:isc:bind:9.11.3:s1:supported_preview:
iscbind9.11.35cpe:/a:isc:bind:9.11.35:s1:supported_preview:
iscbind9.9.13cpe:/a:isc:bind:9.9.13:s1:supported_preview:
iscbind9.16.11cpe:/a:isc:bind:9.16.11:s1:supported_preview:
iscbind9.11.21cpe:/a:isc:bind:9.11.21:s1:supported_preview:
iscbind9.9.3cpe:/a:isc:bind:9.9.3:s1:supported_preview:
iscbind9.10.7cpe:/a:isc:bind:9.10.7:s1:supported_preview:
iscbind9.11.5cpe:/a:isc:bind:9.11.5:s6:supported_preview:
iscbind9.16.8cpe:/a:isc:bind:9.16.8:s1:supported_preview:
iscbind9.16.13cpe:/a:isc:bind:9.16.13:s1:supported_preview:

Vendor	Product	Version	CPE
isc	bind	9.11.3	cpe:/a:isc:bind:9.11.3:s1:supported_preview:
isc	bind	9.11.35	cpe:/a:isc:bind:9.11.35:s1:supported_preview:
isc	bind	9.9.13	cpe:/a:isc:bind:9.9.13:s1:supported_preview:
isc	bind	9.16.11	cpe:/a:isc:bind:9.16.11:s1:supported_preview:
isc	bind	9.11.21	cpe:/a:isc:bind:9.11.21:s1:supported_preview:
isc	bind	9.9.3	cpe:/a:isc:bind:9.9.3:s1:supported_preview:
isc	bind	9.10.7	cpe:/a:isc:bind:9.10.7:s1:supported_preview:
isc	bind	9.11.5	cpe:/a:isc:bind:9.11.5:s6:supported_preview:
isc	bind	9.16.8	cpe:/a:isc:bind:9.16.8:s1:supported_preview:
isc	bind	9.16.13	cpe:/a:isc:bind:9.16.13:s1:supported_preview:

Rows per page:

1-10 of 211

CNA Affected

[
  {
    "vendor": "ISC",
    "product": "BIND9",
    "versions": [
      {
        "version": "Open Source Branches 9.3 through 9.11 9.3.0 through versions before 9.11.36",
        "status": "affected"
      },
      {
        "version": "Open Source Branches 9.12 through 9.16 9.12.0 through versions before 9.16.22",
        "status": "affected"
      },
      {
        "version": "Supported Preview Branches 9.9-S through 9.11-S 9.9.3-S1 through versions before 9.11.36-S1",
        "status": "affected"
      },
      {
        "version": "Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.22-S1",
        "status": "affected"
      },
      {
        "version": "Development Branch 9.17 9.17.0 through versions before 9.17.19",
        "status": "affected"
      }
    ]
  }
]