CVE-2021-25220
CVE-2021-25220 · DNS forwarders - cache poisoning vulnerability
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.
CVSS 6.8 · Media · EPSS 3,5% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
bind
- Versiones
- Open Source Branch 9.11 9.11.0 through versions before 9.11.37: Afectada
- Development Branch 9.17 BIND 9.17 all version: Afectada
- Open Source Branch 9.12-16 9.12.0 through versions before 9.16.27: Afectada
- Open Source Branch 9.18 9.18.0: Afectada
- Supported Preview Branch 9.11-S 9.11.0-S through versions before 9.11.37-S: Afectada
- Supported Preview Branch 9.16-S 9.16.0-S through versions before 9.16.27-S: Afectada
Sin corrección publicada
bind9 Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.18.1-1
Actualiza a 1:9.18.1-1
bind9 Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.18.1-1
Actualiza a 1:9.18.1-1
bind9 Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.18.1-1
Actualiza a 1:9.18.1-1
bind9 Ubuntu:Pro:14.04:LTS
- Versiones
- 1:9.9.3.dfsg.P2-4ubuntu1
- 1:9.9.3.dfsg.P2-4ubuntu2
- 1:9.9.3.dfsg.P2-4ubuntu3
- 1:9.9.5.dfsg-2
- 1:9.9.5.dfsg-3
- 1:9.9.5.dfsg-3ubuntu0.1
- 1:9.9.5.dfsg-3ubuntu0.2
- 1:9.9.5.dfsg-3ubuntu0.3
- 1:9.9.5.dfsg-3ubuntu0.4
- 1:9.9.5.dfsg-3ubuntu0.5
- 1:9.9.5.dfsg-3ubuntu0.6
- 1:9.9.5.dfsg-3ubuntu0.7
- 1:9.9.5.dfsg-3ubuntu0.8
- 1:9.9.5.dfsg-3ubuntu0.9
- 1:9.9.5.dfsg-3ubuntu0.10
- 1:9.9.5.dfsg-3ubuntu0.11
- 1:9.9.5.dfsg-3ubuntu0.12
- 1:9.9.5.dfsg-3ubuntu0.13
- 1:9.9.5.dfsg-3ubuntu0.14
- 1:9.9.5.dfsg-3ubuntu0.15
- 1:9.9.5.dfsg-3ubuntu0.16
- 1:9.9.5.dfsg-3ubuntu0.17
- 1:9.9.5.dfsg-3ubuntu0.18
- 1:9.9.5.dfsg-3ubuntu0.19
- 1:9.9.5.dfsg-3ubuntu0.19+esm1
- 1:9.9.5.dfsg-3ubuntu0.19+esm2
- 1:9.9.5.dfsg-3ubuntu0.19+esm3
- 1:9.9.5.dfsg-3ubuntu0.19+esm4
- 1:9.9.5.dfsg-3ubuntu0.19+esm5
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.9.5.dfsg-3ubuntu0.19+esm6
Actualiza a 1:9.9.5.dfsg-3ubuntu0.19+esm6
bind9 Ubuntu:Pro:16.04:LTS
- Versiones
- 1:9.9.5.dfsg-11ubuntu1
- 1:9.9.5.dfsg-12
- 1:9.9.5.dfsg-12.1
- 1:9.9.5.dfsg-12.1ubuntu1
- 1:9.10.3.dfsg.P2-4
- 1:9.10.3.dfsg.P2-5
- 1:9.10.3.dfsg.P4-3
- 1:9.10.3.dfsg.P4-4
- 1:9.10.3.dfsg.P4-5
- 1:9.10.3.dfsg.P4-8
- 1:9.10.3.dfsg.P4-8ubuntu1
- 1:9.10.3.dfsg.P4-8ubuntu1.1
- 1:9.10.3.dfsg.P4-8ubuntu1.2
- 1:9.10.3.dfsg.P4-8ubuntu1.3
- 1:9.10.3.dfsg.P4-8ubuntu1.4
- 1:9.10.3.dfsg.P4-8ubuntu1.5
- 1:9.10.3.dfsg.P4-8ubuntu1.6
- 1:9.10.3.dfsg.P4-8ubuntu1.7
- 1:9.10.3.dfsg.P4-8ubuntu1.8
- 1:9.10.3.dfsg.P4-8ubuntu1.9
- 1:9.10.3.dfsg.P4-8ubuntu1.10
- 1:9.10.3.dfsg.P4-8ubuntu1.11
- 1:9.10.3.dfsg.P4-8ubuntu1.12
- 1:9.10.3.dfsg.P4-8ubuntu1.14
- 1:9.10.3.dfsg.P4-8ubuntu1.15
- 1:9.10.3.dfsg.P4-8ubuntu1.16
- 1:9.10.3.dfsg.P4-8ubuntu1.17
- 1:9.10.3.dfsg.P4-8ubuntu1.18
- 1:9.10.3.dfsg.P4-8ubuntu1.19
- 1:9.10.3.dfsg.P4-8ubuntu1.19+esm1
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.10.3.dfsg.P4-8ubuntu1.19+esm2
Actualiza a 1:9.10.3.dfsg.P4-8ubuntu1.19+esm2
bind9 Ubuntu:18.04:LTS
- Versiones
- 1:9.10.3.dfsg.P4-12.6ubuntu1
- 1:9.11.2.P1-1ubuntu2
- 1:9.11.2.P1-1ubuntu3
- 1:9.11.2.P1-1ubuntu4
- 1:9.11.2.P1-1ubuntu5
- 1:9.11.3+dfsg-1ubuntu1
- 1:9.11.3+dfsg-1ubuntu1.1
- 1:9.11.3+dfsg-1ubuntu1.2
- 1:9.11.3+dfsg-1ubuntu1.3
- 1:9.11.3+dfsg-1ubuntu1.5
- 1:9.11.3+dfsg-1ubuntu1.7
- 1:9.11.3+dfsg-1ubuntu1.8
- 1:9.11.3+dfsg-1ubuntu1.9
- 1:9.11.3+dfsg-1ubuntu1.10
- 1:9.11.3+dfsg-1ubuntu1.11
- 1:9.11.3+dfsg-1ubuntu1.12
- 1:9.11.3+dfsg-1ubuntu1.13
- 1:9.11.3+dfsg-1ubuntu1.14
- 1:9.11.3+dfsg-1ubuntu1.15
- 1:9.11.3+dfsg-1ubuntu1.16
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.11.3+dfsg-1ubuntu1.17
Actualiza a 1:9.11.3+dfsg-1ubuntu1.17
bind9 Ubuntu:20.04:LTS
- Versiones
- 1:9.11.5.P4+dfsg-5.1ubuntu2
- 1:9.11.5.P4+dfsg-5.1ubuntu3
- 1:9.11.5.P4+dfsg-5.1ubuntu4
- 1:9.11.5.P4+dfsg-5.1ubuntu5
- 1:9.11.14+dfsg-1ubuntu1
- 1:9.11.14+dfsg-3ubuntu1
- 1:9.16.0-1ubuntu3
- 1:9.16.0-1ubuntu4
- 1:9.16.0-1ubuntu5
- 1:9.16.1-0ubuntu1
- 1:9.16.1-0ubuntu2
- 1:9.16.1-0ubuntu2.1
- 1:9.16.1-0ubuntu2.2
- 1:9.16.1-0ubuntu2.3
- 1:9.16.1-0ubuntu2.4
- 1:9.16.1-0ubuntu2.6
- 1:9.16.1-0ubuntu2.7
- 1:9.16.1-0ubuntu2.8
- 1:9.16.1-0ubuntu2.9
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.16.1-0ubuntu2.10
Actualiza a 1:9.16.1-0ubuntu2.10
bind9 Ubuntu:22.04:LTS
- Versiones
- 1:9.16.15-1ubuntu1
- 1:9.16.15-1ubuntu2
- 1:9.16.15-1ubuntu3
- 1:9.18.0-2ubuntu1
- 1:9.18.0-2ubuntu2
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.18.0-2ubuntu3
Actualiza a 1:9.18.0-2ubuntu3
Fuentes originales
- https://kb.isc.org/v1/docs/cve-2021-25220
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYD7US4HZRFUGAJ66ZTHFBYVP5N3OQBY/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/API7U5E7SX7BAAVFNW366FFJGD6NZZKV/
- https://security.netapp.com/advisory/ntap-20220408-0001/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5VX3I2U3ICOIEI5Y7OYA6CHOLFMNH3YQ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2SXT7247QTKNBQ67MNRGZD23ADXU6E5U/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DE3UAVCPUMAKG27ZL5YXSP2C3RIOW3JZ/
- https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
- https://security.gentoo.org/glsa/202210-25
- https://supportportal.juniper.net/s/article/2022-10-Security-Bulletin-Junos-OS-SRX-Series-Cache-poisoning-vulnerability-in-BIND-used-by-DNS-Proxy-CVE-2021-25220?language=en_US
- https://nvd.nist.gov/vuln/detail/CVE-2021-25220