CVE-2021-25220 DNS forwarders - cache poisoning vulnerability

🗓️ 23 Mar 2022 12:50:10Reported by iscType

CVE-2021-25220 DNS forwarders cache poisoning vulnerability affecting BIND versions 9.11.0 to 9.18.

Reporter	Title	Published	Views	Family All 300
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	6 Jan 202321:23	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to cache poisoning due to ISC BIND (CVE-2021-25220)	17 Jan 202414:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	26 Mar 202503:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	1 Mar 202418:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is vulnerable to denial of service and cache poisoning attacks due to flaws in ISC BIND (CVE-2022-0396, CVE-2021-25220)	13 Jul 202219:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	26 Mar 202503:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	30 Dec 202210:56	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package bind version 9.11.37-alt1	21 Mar 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package bind version 9.11.37-alt1	24 Mar 202200:00	–	altlinux
Tenable Nessus	AIX 7.3 TL 0 : bind (IJ40614)	23 Mar 202300:00	–	nessus

[
  {
    "vendor": "ISC",
    "product": "BIND",
    "versions": [
      {
        "version": "Open Source Branch 9.11  9.11.0 through versions before 9.11.37",
        "status": "affected"
      },
      {
        "version": "Development Branch 9.17  BIND 9.17 all version",
        "status": "affected"
      },
      {
        "version": "Open Source Branch 9.12-16  9.12.0 through versions before 9.16.27",
        "status": "affected"
      },
      {
        "version": "Open Source Branch 9.18 9.18.0",
        "status": "affected"
      },
      {
        "version": "Supported Preview Branch 9.11-S 9.11.0-S through versions before 9.11.37-S",
        "status": "affected"
      },
      {
        "version": "Supported Preview Branch 9.16-S  9.16.0-S through versions before 9.16.27-S",
        "status": "affected"
      }
    ]
  }
]

Source	Link
kb	www.kb.isc.org/v1/docs/cve-2021-25220
security	www.security.netapp.com/advisory/ntap-20220408-0001/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2SXT7247QTKNBQ67MNRGZD23ADXU6E5U/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYD7US4HZRFUGAJ66ZTHFBYVP5N3OQBY/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DE3UAVCPUMAKG27ZL5YXSP2C3RIOW3JZ/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5VX3I2U3ICOIEI5Y7OYA6CHOLFMNH3YQ/
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/API7U5E7SX7BAAVFNW366FFJGD6NZZKV/
supportportal	www.supportportal.juniper.net/s/article/2022-10-Security-Bulletin-Junos-OS-SRX-Series-Cache-poisoning-vulnerability-in-BIND-used-by-DNS-Proxy-CVE-2021-25220
security	www.security.gentoo.org/glsa/202210-25

23 Jul 2023 00:00Current

7High risk

Vulners AI Score7

CVSS 3.16.8

EPSS0.0325