p PatchFirst

CVE-2021-25220

CVE-2021-25220 · DNS forwarders - cache poisoning vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.

CVSS 6.8 · Medium · EPSS 3.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • bind

    Versions
    • Open Source Branch 9.11 9.11.0 through versions before 9.11.37: Affected
    • Development Branch 9.17 BIND 9.17 all version: Affected
    • Open Source Branch 9.12-16 9.12.0 through versions before 9.16.27: Affected
    • Open Source Branch 9.18 9.18.0: Affected
    • Supported Preview Branch 9.11-S 9.11.0-S through versions before 9.11.37-S: Affected
    • Supported Preview Branch 9.16-S 9.16.0-S through versions before 9.16.27-S: Affected

    No fix published

  • bind9 Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:9.18.1-1

    Update to 1:9.18.1-1

  • bind9 Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:9.18.1-1

    Update to 1:9.18.1-1

  • bind9 Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:9.18.1-1

    Update to 1:9.18.1-1

  • bind9 Ubuntu:Pro:14.04:LTS

    Versions
    • 1:9.9.3.dfsg.P2-4ubuntu1
    • 1:9.9.3.dfsg.P2-4ubuntu2
    • 1:9.9.3.dfsg.P2-4ubuntu3
    • 1:9.9.5.dfsg-2
    • 1:9.9.5.dfsg-3
    • 1:9.9.5.dfsg-3ubuntu0.1
    • 1:9.9.5.dfsg-3ubuntu0.2
    • 1:9.9.5.dfsg-3ubuntu0.3
    • 1:9.9.5.dfsg-3ubuntu0.4
    • 1:9.9.5.dfsg-3ubuntu0.5
    • 1:9.9.5.dfsg-3ubuntu0.6
    • 1:9.9.5.dfsg-3ubuntu0.7
    • 1:9.9.5.dfsg-3ubuntu0.8
    • 1:9.9.5.dfsg-3ubuntu0.9
    • 1:9.9.5.dfsg-3ubuntu0.10
    • 1:9.9.5.dfsg-3ubuntu0.11
    • 1:9.9.5.dfsg-3ubuntu0.12
    • 1:9.9.5.dfsg-3ubuntu0.13
    • 1:9.9.5.dfsg-3ubuntu0.14
    • 1:9.9.5.dfsg-3ubuntu0.15
    • 1:9.9.5.dfsg-3ubuntu0.16
    • 1:9.9.5.dfsg-3ubuntu0.17
    • 1:9.9.5.dfsg-3ubuntu0.18
    • 1:9.9.5.dfsg-3ubuntu0.19
    • 1:9.9.5.dfsg-3ubuntu0.19+esm1
    • 1:9.9.5.dfsg-3ubuntu0.19+esm2
    • 1:9.9.5.dfsg-3ubuntu0.19+esm3
    • 1:9.9.5.dfsg-3ubuntu0.19+esm4
    • 1:9.9.5.dfsg-3ubuntu0.19+esm5
    Affected ranges
    • ECOSYSTEM: < 1:9.9.5.dfsg-3ubuntu0.19+esm6

    Update to 1:9.9.5.dfsg-3ubuntu0.19+esm6

  • bind9 Ubuntu:Pro:16.04:LTS

    Versions
    • 1:9.9.5.dfsg-11ubuntu1
    • 1:9.9.5.dfsg-12
    • 1:9.9.5.dfsg-12.1
    • 1:9.9.5.dfsg-12.1ubuntu1
    • 1:9.10.3.dfsg.P2-4
    • 1:9.10.3.dfsg.P2-5
    • 1:9.10.3.dfsg.P4-3
    • 1:9.10.3.dfsg.P4-4
    • 1:9.10.3.dfsg.P4-5
    • 1:9.10.3.dfsg.P4-8
    • 1:9.10.3.dfsg.P4-8ubuntu1
    • 1:9.10.3.dfsg.P4-8ubuntu1.1
    • 1:9.10.3.dfsg.P4-8ubuntu1.2
    • 1:9.10.3.dfsg.P4-8ubuntu1.3
    • 1:9.10.3.dfsg.P4-8ubuntu1.4
    • 1:9.10.3.dfsg.P4-8ubuntu1.5
    • 1:9.10.3.dfsg.P4-8ubuntu1.6
    • 1:9.10.3.dfsg.P4-8ubuntu1.7
    • 1:9.10.3.dfsg.P4-8ubuntu1.8
    • 1:9.10.3.dfsg.P4-8ubuntu1.9
    • 1:9.10.3.dfsg.P4-8ubuntu1.10
    • 1:9.10.3.dfsg.P4-8ubuntu1.11
    • 1:9.10.3.dfsg.P4-8ubuntu1.12
    • 1:9.10.3.dfsg.P4-8ubuntu1.14
    • 1:9.10.3.dfsg.P4-8ubuntu1.15
    • 1:9.10.3.dfsg.P4-8ubuntu1.16
    • 1:9.10.3.dfsg.P4-8ubuntu1.17
    • 1:9.10.3.dfsg.P4-8ubuntu1.18
    • 1:9.10.3.dfsg.P4-8ubuntu1.19
    • 1:9.10.3.dfsg.P4-8ubuntu1.19+esm1
    Affected ranges
    • ECOSYSTEM: < 1:9.10.3.dfsg.P4-8ubuntu1.19+esm2

    Update to 1:9.10.3.dfsg.P4-8ubuntu1.19+esm2

  • bind9 Ubuntu:18.04:LTS

    Versions
    • 1:9.10.3.dfsg.P4-12.6ubuntu1
    • 1:9.11.2.P1-1ubuntu2
    • 1:9.11.2.P1-1ubuntu3
    • 1:9.11.2.P1-1ubuntu4
    • 1:9.11.2.P1-1ubuntu5
    • 1:9.11.3+dfsg-1ubuntu1
    • 1:9.11.3+dfsg-1ubuntu1.1
    • 1:9.11.3+dfsg-1ubuntu1.2
    • 1:9.11.3+dfsg-1ubuntu1.3
    • 1:9.11.3+dfsg-1ubuntu1.5
    • 1:9.11.3+dfsg-1ubuntu1.7
    • 1:9.11.3+dfsg-1ubuntu1.8
    • 1:9.11.3+dfsg-1ubuntu1.9
    • 1:9.11.3+dfsg-1ubuntu1.10
    • 1:9.11.3+dfsg-1ubuntu1.11
    • 1:9.11.3+dfsg-1ubuntu1.12
    • 1:9.11.3+dfsg-1ubuntu1.13
    • 1:9.11.3+dfsg-1ubuntu1.14
    • 1:9.11.3+dfsg-1ubuntu1.15
    • 1:9.11.3+dfsg-1ubuntu1.16
    Affected ranges
    • ECOSYSTEM: < 1:9.11.3+dfsg-1ubuntu1.17

    Update to 1:9.11.3+dfsg-1ubuntu1.17

  • bind9 Ubuntu:20.04:LTS

    Versions
    • 1:9.11.5.P4+dfsg-5.1ubuntu2
    • 1:9.11.5.P4+dfsg-5.1ubuntu3
    • 1:9.11.5.P4+dfsg-5.1ubuntu4
    • 1:9.11.5.P4+dfsg-5.1ubuntu5
    • 1:9.11.14+dfsg-1ubuntu1
    • 1:9.11.14+dfsg-3ubuntu1
    • 1:9.16.0-1ubuntu3
    • 1:9.16.0-1ubuntu4
    • 1:9.16.0-1ubuntu5
    • 1:9.16.1-0ubuntu1
    • 1:9.16.1-0ubuntu2
    • 1:9.16.1-0ubuntu2.1
    • 1:9.16.1-0ubuntu2.2
    • 1:9.16.1-0ubuntu2.3
    • 1:9.16.1-0ubuntu2.4
    • 1:9.16.1-0ubuntu2.6
    • 1:9.16.1-0ubuntu2.7
    • 1:9.16.1-0ubuntu2.8
    • 1:9.16.1-0ubuntu2.9
    Affected ranges
    • ECOSYSTEM: < 1:9.16.1-0ubuntu2.10

    Update to 1:9.16.1-0ubuntu2.10

  • bind9 Ubuntu:22.04:LTS

    Versions
    • 1:9.16.15-1ubuntu1
    • 1:9.16.15-1ubuntu2
    • 1:9.16.15-1ubuntu3
    • 1:9.18.0-2ubuntu1
    • 1:9.18.0-2ubuntu2
    Affected ranges
    • ECOSYSTEM: < 1:9.18.0-2ubuntu3

    Update to 1:9.18.0-2ubuntu3

Original sources

Check your server →