CVE-2021-25215 An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself

🗓️ 29 Apr 2021 00:55:16Reported by iscType

A vulnerability in BIND allows remote attackers to cause a denial of service (DoS) via crafted DNAME records

Reporter	Title	Published	Views	Family All 304
ALT Linux	Security fix for the ALT Linux 10 package bind version 9.11.31-alt1	29 Apr 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package bind version 9.11.31-alt1	12 May 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package bind version 9.10.8.P1-alt4	13 May 202100:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Vulnerability in bind (CVE-2021-25215)	23 Sep 202101:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture is vulnerable to using components with known vulnerabilities	30 Jul 202105:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in BIND affects AIX (CVE-2021-25215)	4 Nov 202117:50	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: Publicly disclosed vulnerabilities from Bind affect IBM Netezza Host Management	23 Sep 202104:02	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in ISC BIND affects IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data (CVE-2021-25215)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in bind (CVE-2021-25215) affects Power HMC	22 Nov 202105:46	–	ibm

[
  {
    "product": "BIND9",
    "vendor": "ISC",
    "versions": [
      {
        "status": "affected",
        "version": "Open Source Branches 9.0 through 9.11 9.0.0 through versions before 9.11.30"
      },
      {
        "status": "affected",
        "version": "Open Source Branches 9.12 through 9.16 9.12.0 through versions before 9.16.14"
      },
      {
        "status": "affected",
        "version": "Supported Preview Branches 9.9-S through 9.11-S 9.9.3-S1 through versions before 9.11.30-S1"
      },
      {
        "status": "affected",
        "version": "Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.14-S1"
      },
      {
        "status": "affected",
        "version": "Development Branch 9.17 9.17.0 through versiosn before 9.17.12"
      }
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VEC2XG4Q2ODTN2C4CGXEIXU3EUTBMK7L/
kb	www.kb.isc.org/v1/docs/cve-2021-25215
debian	www.debian.org/security/2021/dsa-4909
security	www.security.netapp.com/advisory/ntap-20210521-0006/
openwall	www.openwall.com/lists/oss-security/2021/04/29/3
oracle	www.oracle.com/security-alerts/cpuoct2021.html
lists	www.lists.debian.org/debian-lts-announce/2021/05/msg00001.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDSRPCJQ7MZC6CENH5PO3VQOFI7VSWBE/
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
openwall	www.openwall.com/lists/oss-security/2021/04/29/2

08 Mar 2022 14:08Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.5

EPSS0.11387