CVE-2021-25219
Description
In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing.
Risk Information
Base Score
5.3
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
Exploitation Probability
0.706
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerability CVE-2021-25219 are affected in BIND 9.17.18 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.10.5.s1 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.11.5.s5 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.11.6.s1 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.10.7.s1 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.11.12.s1 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.11.21.s1 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.11.27.s1 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.11.29.s1 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.11.3.s1 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.11.5.s3 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.11.5.s6 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.11.7.s1 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.11.8.s1 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.16.11.s1 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.16.13.s1 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.16.8.s1 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.9.12.s1 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.9.13.s1 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.9.3.s1 | Windows |
| Vulnerabilities CVE-2021-25219 are affected in BIND 9.11.35 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.11.35.s1 | Windows |
| Vulnerabilities CVE-2021-25219 are affected in BIND 9.16.21 | Windows |
| Multiple Vulnerabilities are affected in BIND 9.16.21.s1 | Windows |
| Vulnerabilities CVE-2021-25219 are affected in BIND 9.17.18 | Windows |
| bind9 security update(DSA-4994-1) bind9_9.16.22-1~deb11u1_amd64.deb | Linux |
| bind9 security update(DSA-4994-1) bind9_9.11.5.P4+dfsg-5.1+deb10u6_i386.deb | Linux |
| bind9 security update(DSA-4994-1) bind9_9.11.5.P4+dfsg-5.1+deb10u6_amd64.deb | Linux |
| Internet Domain Name Server (USN-5126-1) bind9_9.16.1-0ubuntu2.9_i386.deb | Linux |
| Internet Domain Name Server (USN-5126-1) bind9_9.16.1-0ubuntu2.9_amd64.deb | Linux |
| Internet Domain Name Server (USN-5126-1) bind9_9.16.15-1ubuntu1.1_i386.deb | Linux |
| Internet Domain Name Server (USN-5126-1) bind9_9.16.15-1ubuntu1.1_amd64.deb | Linux |
| Internet Domain Name Server (USN-5126-1) bind9_9.11.3+dfsg-1ubuntu1.16_i386.deb | Linux |
| Internet Domain Name Server (USN-5126-1) bind9_9.11.3+dfsg-1ubuntu1.16_amd64.deb | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) bind-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) bind-chrootenv-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) bind-debuginfo-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) bind-debugsource-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) bind-doc-9.11.22-3.37.1.noarch.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) bind-utils-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) bind-utils-debuginfo-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) libbind9-161-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) libbind9-161-debuginfo-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) libdns1110-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) libdns1110-debuginfo-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) libirs161-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) libirs161-debuginfo-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) libisc1107-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) libisc1107-32bit-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) libisc1107-debuginfo-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) libisc1107-debuginfo-32bit-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) libisccc161-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) libisccc161-debuginfo-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) libisccfg163-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) libisccfg163-debuginfo-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) liblwres161-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) liblwres161-debuginfo-9.11.22-3.37.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3657-1(SUSE Linux Enterprise Server 12-SP5 ) python-bind-9.11.22-3.37.1.noarch.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-chroot-9.11.36-3.el8.x86_64.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-debugsource-9.11.36-3.el8.i686.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-debugsource-9.11.36-3.el8.x86_64.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-devel-9.11.36-3.el8.i686.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-devel-9.11.36-3.el8.x86_64.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-export-devel-9.11.36-3.el8.i686.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-export-devel-9.11.36-3.el8.x86_64.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-libs-9.11.36-3.el8.x86_64.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-libs-lite-9.11.36-3.el8.x86_64.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-license-9.11.36-3.el8.noarch.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-lite-devel-9.11.36-3.el8.i686.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-lite-devel-9.11.36-3.el8.x86_64.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-pkcs11-9.11.36-3.el8.x86_64.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-pkcs11-devel-9.11.36-3.el8.i686.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-pkcs11-devel-9.11.36-3.el8.x86_64.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-pkcs11-libs-9.11.36-3.el8.i686.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-pkcs11-libs-9.11.36-3.el8.x86_64.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-pkcs11-utils-9.11.36-3.el8.x86_64.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-sdb-9.11.36-3.el8.x86_64.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-sdb-chroot-9.11.36-3.el8.x86_64.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update bind-utils-9.11.36-3.el8.x86_64.rpm | Linux |
| (RHSA-2022:2092) bind security, bug fix, and enhancement update python3-bind-9.11.36-3.el8.noarch.rpm | Linux |
| CVE-2021-25219 | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234