CVE-2021-25214 A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly

🗓️ 29 Apr 2021 00:55:16Reported by iscType

A broken IXFR in BIND can terminate named proces

Reporter	Title	Published	Views	Family All 247
ALT Linux	Security fix for the ALT Linux 10 package bind version 9.11.31-alt1	29 Apr 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package bind version 9.11.31-alt1	12 May 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package bind version 9.10.8.P1-alt4	13 May 202100:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability with ISC BIND affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2021-25214).	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in bind (CVE-2021-25214) affects Power HMC	31 May 202206:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	19 Jan 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: BIND for IBM i is affected by CVE-2021-25214 and CVE-2021-25215	17 Jun 202119:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in ISC BIND affects IBM Integrated Analytics System.	8 Mar 202209:28	–	ibm
Tenable Nessus	Amazon Linux 2 : bind (ALAS-2021-1651)	23 Jun 202100:00	–	nessus

[
  {
    "product": "BIND9",
    "vendor": "ISC",
    "versions": [
      {
        "status": "affected",
        "version": "Open Source Branch 9.8 9.8.5 through 9.8.8"
      },
      {
        "status": "affected",
        "version": "Open Source Branches 9.9 through 9.11 9.9.3 through versions before 9.11.30"
      },
      {
        "status": "affected",
        "version": "Open Source Branches 9.12 through 9.16 9.12.0 through versions before 9.16.14"
      },
      {
        "status": "affected",
        "version": "Supported Preview Branches 9.9-S through 9.11-S 9.9.3-S1 through versions before 9.11.30-S1"
      },
      {
        "status": "affected",
        "version": "Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.14-S1"
      },
      {
        "status": "affected",
        "version": "Development Branch 9.17 9.17.0 through versiosn before 9.17.12"
      }
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VEC2XG4Q2ODTN2C4CGXEIXU3EUTBMK7L/
debian	www.debian.org/security/2021/dsa-4909
security	www.security.netapp.com/advisory/ntap-20210521-0006/
openwall	www.openwall.com/lists/oss-security/2021/04/29/3
kb	www.kb.isc.org/v1/docs/cve-2021-25214
lists	www.lists.debian.org/debian-lts-announce/2021/05/msg00001.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDSRPCJQ7MZC6CENH5PO3VQOFI7VSWBE/
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
openwall	www.openwall.com/lists/oss-security/2021/04/29/2
openwall	www.openwall.com/lists/oss-security/2021/04/29/4

08 Mar 2022 14:07Current

7.2High risk

Vulners AI Score7.2

CVSS 3.16.5

EPSS0.0594