Riskcovery

CVE-2021-25215

An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself

State
Published
Severity
7.5 High
Published
Apr 29, 2021
Updated
Sep 16, 2024
Reserved
Jan 15, 2021

Read the record on cve.org

Description

In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a query for a record triggering the flaw described above, the named process will terminate due to a failed assertion check. The vulnerability affects all currently maintained BIND 9 branches (9.11, 9.11-S, 9.16, 9.16-S, 9.17) as well as all other versions of BIND 9.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hisc

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
BIND9ISC
  • Open Source Branches 9.0 through 9.11 9.0.0 through versions before 9.11.30Affected
  • Open Source Branches 9.12 through 9.16 9.12.0 through versions before 9.16.14Affected
  • Supported Preview Branches 9.9-S through 9.11-S 9.9.3-S1 through versions before 9.11.30-S1Affected
  • Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.14-S1Affected
  • Development Branch 9.17 9.17.0 through versiosn before 9.17.12Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.