CVE-2021-25214
CVE-2021-25214 · A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a malformed IXFR triggering the flaw described above, the named process will terminate due to a failed assertion the next time the transferred secondary zone is refreshed.
CVSS 6.5 · Media · EPSS 6,3% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
bind9
- Versiones
- Open Source Branch 9.8 9.8.5 through 9.8.8: Afectada
- Open Source Branches 9.9 through 9.11 9.9.3 through versions before 9.11.30: Afectada
- Open Source Branches 9.12 through 9.16 9.12.0 through versions before 9.16.14: Afectada
- Supported Preview Branches 9.9-S through 9.11-S 9.9.3-S1 through versions before 9.11.30-S1: Afectada
- Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.14-S1: Afectada
- Development Branch 9.17 9.17.0 through versiosn before 9.17.12: Afectada
Sin corrección publicada
bind9 Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.16.15-1
Actualiza a 1:9.16.15-1
bind9 Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.16.15-1
Actualiza a 1:9.16.15-1
bind9 Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.16.15-1
Actualiza a 1:9.16.15-1
bind9 Ubuntu:Pro:14.04:LTS
- Versiones
- 1:9.9.3.dfsg.P2-4ubuntu1
- 1:9.9.3.dfsg.P2-4ubuntu2
- 1:9.9.3.dfsg.P2-4ubuntu3
- 1:9.9.5.dfsg-2
- 1:9.9.5.dfsg-3
- 1:9.9.5.dfsg-3ubuntu0.1
- 1:9.9.5.dfsg-3ubuntu0.2
- 1:9.9.5.dfsg-3ubuntu0.3
- 1:9.9.5.dfsg-3ubuntu0.4
- 1:9.9.5.dfsg-3ubuntu0.5
- 1:9.9.5.dfsg-3ubuntu0.6
- 1:9.9.5.dfsg-3ubuntu0.7
- 1:9.9.5.dfsg-3ubuntu0.8
- 1:9.9.5.dfsg-3ubuntu0.9
- 1:9.9.5.dfsg-3ubuntu0.10
- 1:9.9.5.dfsg-3ubuntu0.11
- 1:9.9.5.dfsg-3ubuntu0.12
- 1:9.9.5.dfsg-3ubuntu0.13
- 1:9.9.5.dfsg-3ubuntu0.14
- 1:9.9.5.dfsg-3ubuntu0.15
- 1:9.9.5.dfsg-3ubuntu0.16
- 1:9.9.5.dfsg-3ubuntu0.17
- 1:9.9.5.dfsg-3ubuntu0.18
- 1:9.9.5.dfsg-3ubuntu0.19
- 1:9.9.5.dfsg-3ubuntu0.19+esm1
- 1:9.9.5.dfsg-3ubuntu0.19+esm2
- 1:9.9.5.dfsg-3ubuntu0.19+esm3
- 1:9.9.5.dfsg-3ubuntu0.19+esm4
- 1:9.9.5.dfsg-3ubuntu0.19+esm5
- 1:9.9.5.dfsg-3ubuntu0.19+esm6
- 1:9.9.5.dfsg-3ubuntu0.19+esm7
- 1:9.9.5.dfsg-3ubuntu0.19+esm9
- 1:9.9.5.dfsg-3ubuntu0.19+esm10
- 1:9.9.5.dfsg-3ubuntu0.19+esm11
- 1:9.9.5.dfsg-3ubuntu0.19+esm12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.9.5.dfsg-3ubuntu0.19+esm13
Actualiza a 1:9.9.5.dfsg-3ubuntu0.19+esm13
bind9 Ubuntu:16.04:LTS
- Versiones
- 1:9.9.5.dfsg-11ubuntu1
- 1:9.9.5.dfsg-12
- 1:9.9.5.dfsg-12.1
- 1:9.9.5.dfsg-12.1ubuntu1
- 1:9.10.3.dfsg.P2-4
- 1:9.10.3.dfsg.P2-5
- 1:9.10.3.dfsg.P4-3
- 1:9.10.3.dfsg.P4-4
- 1:9.10.3.dfsg.P4-5
- 1:9.10.3.dfsg.P4-8
- 1:9.10.3.dfsg.P4-8ubuntu1
- 1:9.10.3.dfsg.P4-8ubuntu1.1
- 1:9.10.3.dfsg.P4-8ubuntu1.2
- 1:9.10.3.dfsg.P4-8ubuntu1.3
- 1:9.10.3.dfsg.P4-8ubuntu1.4
- 1:9.10.3.dfsg.P4-8ubuntu1.5
- 1:9.10.3.dfsg.P4-8ubuntu1.6
- 1:9.10.3.dfsg.P4-8ubuntu1.7
- 1:9.10.3.dfsg.P4-8ubuntu1.8
- 1:9.10.3.dfsg.P4-8ubuntu1.9
- 1:9.10.3.dfsg.P4-8ubuntu1.10
- 1:9.10.3.dfsg.P4-8ubuntu1.11
- 1:9.10.3.dfsg.P4-8ubuntu1.12
- 1:9.10.3.dfsg.P4-8ubuntu1.14
- 1:9.10.3.dfsg.P4-8ubuntu1.15
- 1:9.10.3.dfsg.P4-8ubuntu1.16
- 1:9.10.3.dfsg.P4-8ubuntu1.17
- 1:9.10.3.dfsg.P4-8ubuntu1.18
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.10.3.dfsg.P4-8ubuntu1.19
Actualiza a 1:9.10.3.dfsg.P4-8ubuntu1.19
bind9 Ubuntu:18.04:LTS
- Versiones
- 1:9.10.3.dfsg.P4-12.6ubuntu1
- 1:9.11.2.P1-1ubuntu2
- 1:9.11.2.P1-1ubuntu3
- 1:9.11.2.P1-1ubuntu4
- 1:9.11.2.P1-1ubuntu5
- 1:9.11.3+dfsg-1ubuntu1
- 1:9.11.3+dfsg-1ubuntu1.1
- 1:9.11.3+dfsg-1ubuntu1.2
- 1:9.11.3+dfsg-1ubuntu1.3
- 1:9.11.3+dfsg-1ubuntu1.5
- 1:9.11.3+dfsg-1ubuntu1.7
- 1:9.11.3+dfsg-1ubuntu1.8
- 1:9.11.3+dfsg-1ubuntu1.9
- 1:9.11.3+dfsg-1ubuntu1.10
- 1:9.11.3+dfsg-1ubuntu1.11
- 1:9.11.3+dfsg-1ubuntu1.12
- 1:9.11.3+dfsg-1ubuntu1.13
- 1:9.11.3+dfsg-1ubuntu1.14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.11.3+dfsg-1ubuntu1.15
Actualiza a 1:9.11.3+dfsg-1ubuntu1.15
bind9 Ubuntu:20.04:LTS
- Versiones
- 1:9.11.5.P4+dfsg-5.1ubuntu2
- 1:9.11.5.P4+dfsg-5.1ubuntu3
- 1:9.11.5.P4+dfsg-5.1ubuntu4
- 1:9.11.5.P4+dfsg-5.1ubuntu5
- 1:9.11.14+dfsg-1ubuntu1
- 1:9.11.14+dfsg-3ubuntu1
- 1:9.16.0-1ubuntu3
- 1:9.16.0-1ubuntu4
- 1:9.16.0-1ubuntu5
- 1:9.16.1-0ubuntu1
- 1:9.16.1-0ubuntu2
- 1:9.16.1-0ubuntu2.1
- 1:9.16.1-0ubuntu2.2
- 1:9.16.1-0ubuntu2.3
- 1:9.16.1-0ubuntu2.4
- 1:9.16.1-0ubuntu2.6
- 1:9.16.1-0ubuntu2.7
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.16.1-0ubuntu2.8
Actualiza a 1:9.16.1-0ubuntu2.8
Fuentes originales
- https://kb.isc.org/v1/docs/cve-2021-25214
- http://www.openwall.com/lists/oss-security/2021/04/29/1
- http://www.openwall.com/lists/oss-security/2021/04/29/2
- http://www.openwall.com/lists/oss-security/2021/04/29/3
- http://www.openwall.com/lists/oss-security/2021/04/29/4
- https://www.debian.org/security/2021/dsa-4909
- https://lists.debian.org/debian-lts-announce/2021/05/msg00001.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VEC2XG4Q2ODTN2C4CGXEIXU3EUTBMK7L/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDSRPCJQ7MZC6CENH5PO3VQOFI7VSWBE/
- https://security.netapp.com/advisory/ntap-20210521-0006/
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
- https://nvd.nist.gov/vuln/detail/CVE-2021-25214