CVE-2021-25215

Published: Apr 29, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a query for a record triggering the flaw described above, the named process will terminate due to a failed assertion check. The vulnerability affects all currently maintained BIND 9 branches (9.11, 9.11-S, 9.16, 9.16-S, 9.17) as well as all other versions of BIND 9.

Affected (39)

Products: Debian: Debian Linux · Isc: Bind · Fedoraproject: Fedora · +3 more

Show all products

1 product

1 product

1 product

11 products

Active Iq Unified Manager

1 product

Tekelec Platform Distribution

Siemens

1 product

Sinec Infrastructure Network Services

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 9.0

Configuration B

22 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	From 9.0.0 to 9.11.31
Isc Bind	From 9.12.0 to 9.16.15
Isc Bind	From 9.17.0 to 9.17.12
Isc Bind	Version 9.10.5 s1
Isc Bind	Version 9.10.7 s1
Isc Bind	Version 9.11.12 s1
Isc Bind	Version 9.11.21 s1
Isc Bind	Version 9.11.27 s1
Isc Bind	Version 9.11.29 s1
Isc Bind	Version 9.11.3 s1
Isc Bind	Version 9.11.5 s3
Isc Bind	Version 9.11.5 s5
Isc Bind	Version 9.11.5 s6
Isc Bind	Version 9.11.6 s1
Isc Bind	Version 9.11.7 s1
Isc Bind	Version 9.11.8 s1
Isc Bind	Version 9.16.11 s1
Isc Bind	Version 9.16.13 s1
Isc Bind	Version 9.16.8 s1
Isc Bind	Version 9.9.12 s1
Isc Bind	Version 9.9.13 s1
Isc Bind	Version 9.9.3 s1

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 33
Fedoraproject Fedora	Version 34

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Cloud Backup	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300s Firmware	All versions

Running on/with	Platform Versions
Netapp H300s	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500s Firmware	All versions

Running on/with	Platform Versions
Netapp H500s	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700s Firmware	All versions

Running on/with	Platform Versions
Netapp H700s	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300e Firmware	All versions

Running on/with	Platform Versions
Netapp H300e	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500e Firmware	All versions

Running on/with	Platform Versions
Netapp H500e	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700e Firmware	All versions

Running on/with	Platform Versions
Netapp H700e	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410s Firmware	All versions

Running on/with	Platform Versions
Netapp H410s	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp A250 Firmware	All versions

Running on/with	Platform Versions
Netapp A250	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp 500f Firmware	All versions

Running on/with	Platform Versions
Netapp 500f	All versions

Configuration N

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Tekelec Platform Distribution	From 7.4.0 to 7.7.1

Configuration O

1 vulnerable

Vulnerable Software	Affected Versions
Siemens Sinec Infrastructure Network Services	Before 1.0.1.1

Related CWEs

CWE-617

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (24)

http://www.openwall.com/lists/oss-security/2021/04/29/1

Source: security-officer@isc.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/04/29/2

Source: security-officer@isc.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/04/29/3

Source: security-officer@isc.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/04/29/4

Source: security-officer@isc.org

Mailing ListThird Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf

Source: security-officer@isc.org

PatchThird Party Advisory

https://kb.isc.org/v1/docs/cve-2021-25215

Source: security-officer@isc.org

Vendor Advisory

https://lists.debian.org/debian-lts-announce/2021/05/msg00001.html

Source: security-officer@isc.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VEC2XG4Q2ODTN2C4CGXEIXU3EUTBMK7L/

Source: security-officer@isc.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDSRPCJQ7MZC6CENH5PO3VQOFI7VSWBE/

Source: security-officer@isc.org

https://security.netapp.com/advisory/ntap-20210521-0006/

Source: security-officer@isc.org

Third Party Advisory

https://www.debian.org/security/2021/dsa-4909

Source: security-officer@isc.org

Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2021.html

Source: security-officer@isc.org

PatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/04/29/1