Vulnerability CVE-2021-25219: Information

Description

In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing.

Severity: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Fixed packages

References to Advisories, Solutions, and Tools

1. Affected configurations:

   1. Configuration 1

      cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.10.5:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.11.5:s5:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.11.5:s3:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.9.3:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.10.7:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.11.5:s6:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.11.12:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.11.8:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.9.12:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.9.13:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.11.21:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.16.8:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.16.11:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.11.27:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.16.13:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.11.29:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:9.16.21:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*

      Start including

      9.17.0

      End excliding

      9.17.19

      ---

      cpe:2.3:a:isc:bind:9.11.35:s1:*:*:supported_preview:*:*:*

      ---

      cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*

      Start including

      9.12.0

      End excliding

      9.16.22

      ---

      cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*

      Start including

      9.3.0

      End excliding

      9.11.36

      ---

      Configuration 2

      cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

      ---

      Configuration 3

      cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

      ---

      cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

      ---

      Configuration 4

      cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

      ---

      Running on/with:

      cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*

      ---

      Configuration 5

      cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*

      ---

      Running on/with:

      cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*

      ---

      Configuration 6

      cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*

      ---

      Running on/with:

      cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*

      ---

      Configuration 7

      cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*

      ---

      Running on/with:

      cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*

      ---

      Configuration 8

      cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*

      ---

      Running on/with:

      cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*

      ---

      Configuration 9

      cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*

      ---

      Running on/with:

      cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*

      ---

      Configuration 10

      cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*

      ---

      Running on/with:

      cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*

      ---

      Configuration 11

      cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*

      ---

      Running on/with:

      cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*

      ---

      Configuration 12

      cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*

      ---

      Configuration 13

      cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*

      End excliding

      1.0.1.1

      ---

      Configuration 14

      cpe:2.3:a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*

      ---

      cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*

      ---