6.8
Medium
CVE-2021-25220 BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1…
Description
BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BIND | Versions not published |
Other CVEs of BIND
The 11 CVEs of BIND →
CVE-2024-4076
Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result…
7.5
High
CVE-2024-1975
If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from…
7.5
High
CVE-2024-1737
Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any…
7.5
High
CVE-2024-0760
A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the…
7.5
High