6.8
Medium
CVE-2021-25220 BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1…
Description
BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BIND | Versions not published |
References
- kb.isc.org kb.isc.org
- FEDORA-2022-14e36aac0c lists.fedoraproject.org
- FEDORA-2022-042d9c6146 lists.fedoraproject.org
- security.netapp.com security.netapp.com
- FEDORA-2022-a88218de5c lists.fedoraproject.org
- FEDORA-2022-05918f0838 lists.fedoraproject.org
- FEDORA-2022-3f293290c3 lists.fedoraproject.org
- cert-portal.siemens.com cert-portal.siemens.com
- GLSA-202210-25 security.gentoo.org
- supportportal.juniper.net supportportal.juniper.net
Timeline
- Published
- Last modified
Other CVEs of BIND
The 11 CVEs of BIND →
CVE-2024-4076
Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result…
7.5
High
CVE-2024-1975
If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from…
7.5
High
CVE-2024-1737
Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any…
7.5
High
CVE-2024-0760
A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the…
7.5
High