CVE-2021-25215
Published: Apr 29, 2021
Modified: Sep 16, 2024
CVSS v3.1
7.5
Description
In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a query for a record triggering the flaw described above, the named process will terminate due to a failed assertion check. The vulnerability affects all currently maintained BIND 9 branches (9.11, 9.11-S, 9.16, 9.16-S, 9.17) as well as all other versions of BIND 9.
| Vendor | Product | Versions |
|---|---|---|
ISC | BIND9 | affected Open Source Branches 9.0 through 9.11 9.0.0 through versions before 9.11.30affected Open Source Branches 9.12 through 9.16 9.12.0 through versions before 9.16.14affected Supported Preview Branches 9.9-S through 9.11-S 9.9.3-S1 through versions before 9.11.30-S1affected Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.14-S1affected Development Branch 9.17 9.17.0 through versiosn before 9.17.12 |
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now