CVEvulnerability

CVE-2021-25220

6.8 MEDIUM Published 2022-03-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-03-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
CWE-444

Description

BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.

Affected configurations

• isc bind (>= 9.11.0 < 9.11.37) • isc bind (>= 9.11.4 < 9.11.37) • isc bind (>= 9.12.0 < 9.16.27) • isc bind (>= 9.16.8 < 9.16.27) • isc bind (>= 9.17.0 <= 9.18.0) • fedoraproject fedora 34 • fedoraproject fedora 35 • fedoraproject fedora 36 • netapp h300s firmware • netapp h500s firmware • netapp h700s firmware • netapp h300e firmware • netapp h500e firmware • netapp h700e firmware • netapp h410s firmware • netapp h410c firmware • siemens sinec ins (< 1.0) • siemens sinec ins 1.0 • juniper junos (< 19.3) • juniper junos 19.3 • juniper junos 19.4 • juniper junos 20.2 • juniper junos 20.3 • juniper junos 20.4 • juniper junos 21.1 • juniper junos 21.2 • juniper junos 21.3 • juniper junos 21.4 • juniper junos 22.1 • juniper junos 22.2

Related

Weakness · CWE (1)

  • CWE-444 Inconsistent Interpretation of HTTP Requests weakness

References