CVE-2021-25214

Published: Apr 29, 2021Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a malformed IXFR triggering the flaw described above, the named process will terminate due to a failed assertion the next time the transferred secondary zone is refreshed.

Affected (39)

Products: Isc: Bind · Debian: Debian Linux · Fedoraproject: Fedora · +2 more

Show all products

1 product

1 product

1 product

1 product

Sinec Infrastructure Network Services

Netapp

11 products

Active Iq Unified Manager

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	From 9.12.0 to 9.16.15
Isc Bind	From 9.17.0 to 9.17.12
Isc Bind	From 9.8.5 to 9.8.8
Isc Bind	From 9.9.3 to 9.11.31
Isc Bind	Version 9.10.5 s1
Isc Bind	Version 9.10.7 s1
Isc Bind	Version 9.11.12 s1
Isc Bind	Version 9.11.21 s1
Isc Bind	Version 9.11.27 s1
Isc Bind	Version 9.11.29 s1
Isc Bind	Version 9.11.3 s1
Isc Bind	Version 9.11.5 s3
Isc Bind	Version 9.11.5 s5
Isc Bind	Version 9.11.5 s6
Isc Bind	Version 9.11.6 s1
Isc Bind	Version 9.11.7 s1
Isc Bind	Version 9.11.8 s1
Isc Bind	Version 9.16.11 s1
Isc Bind	Version 9.16.13 s1
Isc Bind	Version 9.16.8 s1
Isc Bind	Version 9.9.12 s1
Isc Bind	Version 9.9.13 s1
Isc Bind	Version 9.9.3 s1

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 9.0

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 33
Fedoraproject Fedora	Version 34

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Siemens Sinec Infrastructure Network Services	Before 1.0.1.1

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Cloud Backup	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff A250 Firmware	All versions

Running on/with	Platform Versions
Netapp Aff A250	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Aff 500f Firmware	All versions

Running on/with	Platform Versions
Netapp Aff 500f	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300s Firmware	All versions

Running on/with	Platform Versions
Netapp H300s	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500s Firmware	All versions

Running on/with	Platform Versions
Netapp H500s	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700s Firmware	All versions

Running on/with	Platform Versions
Netapp H700s	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300e Firmware	All versions

Running on/with	Platform Versions
Netapp H300e	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500e Firmware	All versions

Running on/with	Platform Versions
Netapp H500e	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700e Firmware	All versions

Running on/with	Platform Versions
Netapp H700e	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410s Firmware	All versions

Running on/with	Platform Versions
Netapp H410s	All versions

Related CWEs

CWE-617

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (22)

http://www.openwall.com/lists/oss-security/2021/04/29/1

Source: security-officer@isc.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/04/29/2

Source: security-officer@isc.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/04/29/3

Source: security-officer@isc.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/04/29/4

Source: security-officer@isc.org

Mailing ListThird Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf

Source: security-officer@isc.org

PatchThird Party Advisory

https://kb.isc.org/v1/docs/cve-2021-25214

Source: security-officer@isc.org

Vendor Advisory

https://lists.debian.org/debian-lts-announce/2021/05/msg00001.html

Source: security-officer@isc.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VEC2XG4Q2ODTN2C4CGXEIXU3EUTBMK7L/

Source: security-officer@isc.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDSRPCJQ7MZC6CENH5PO3VQOFI7VSWBE/

Source: security-officer@isc.org

https://security.netapp.com/advisory/ntap-20210521-0006/

Source: security-officer@isc.org

Third Party Advisory

https://www.debian.org/security/2021/dsa-4909

Source: security-officer@isc.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/04/29/1