CVE-2021-25219

Published: Oct 27, 2021Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing.

Affected (43)

Products: Isc: Bind · Debian: Debian Linux · Fedoraproject: Fedora · +3 more

Show all products

1 product

1 product

1 product

9 products

1 product

Sinec Infrastructure Network Services

Oracle

2 products

Http Server

Zfs Storage Appliance Kit

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	From 9.12.0 to 9.16.22
Isc Bind	From 9.17.0 to 9.17.19
Isc Bind	From 9.3.0 to 9.11.36
Isc Bind	Version 9.10.5 s1
Isc Bind	Version 9.10.7 s1
Isc Bind	Version 9.11.12 s1
Isc Bind	Version 9.11.21 s1
Isc Bind	Version 9.11.27 s1
Isc Bind	Version 9.11.29 s1
Isc Bind	Version 9.11.35 s1
Isc Bind	Version 9.11.3 s1
Isc Bind	Version 9.11.5 s3
Isc Bind	Version 9.11.5 s5
Isc Bind	Version 9.11.5 s6
Isc Bind	Version 9.11.6 s1
Isc Bind	Version 9.11.7 s1
Isc Bind	Version 9.11.8 s1
Isc Bind	Version 9.16.11 s1
Isc Bind	Version 9.16.13 s1
Isc Bind	Version 9.16.21 s1
Isc Bind	Version 9.16.8 s1
Isc Bind	Version 9.9.12 s1
Isc Bind	Version 9.9.13 s1
Isc Bind	Version 9.9.3 s1

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0
Debian Debian Linux	Version 9.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 33
Fedoraproject Fedora	Version 34
Fedoraproject Fedora	Version 35

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300s Firmware	All versions

Running on/with	Platform Versions
Netapp H300s	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500s Firmware	All versions

Running on/with	Platform Versions
Netapp H500s	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700s Firmware	All versions

Running on/with	Platform Versions
Netapp H700s	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H300e Firmware	All versions

Running on/with	Platform Versions
Netapp H300e	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H500e Firmware	All versions

Running on/with	Platform Versions
Netapp H500e	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H700e Firmware	All versions

Running on/with	Platform Versions
Netapp H700e	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410s Firmware	All versions

Running on/with	Platform Versions
Netapp H410s	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410c Firmware	All versions

Running on/with	Platform Versions
Netapp H410c	All versions

Configuration L

1 vulnerable

Vulnerable Software	Affected Versions
Netapp Cloud Backup	All versions

Configuration M

1 vulnerable

Vulnerable Software	Affected Versions
Siemens Sinec Infrastructure Network Services	Before 1.0.1.1

Configuration N

3 vulnerable

Vulnerable Software	Affected Versions
Oracle Http Server	Version 12.2.1.3.0
Oracle Http Server	Version 12.2.1.4.0
Oracle Zfs Storage Appliance Kit	Version 8.8

References (20)

https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf

Source: security-officer@isc.org

PatchThird Party Advisory

https://kb.isc.org/v1/docs/cve-2021-25219

Source: security-officer@isc.org

Vendor Advisory

https://lists.debian.org/debian-lts-announce/2021/11/msg00001.html

Source: security-officer@isc.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EF4NAVRV4H3W4GA3LGGZYUKD3HSJBAVW/

Source: security-officer@isc.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGV7SA27CTYLGFJSPUM3V36ZWK7WWDI4/

Source: security-officer@isc.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTKC4E3HUOLYN5IA4EBL4VAQSWG2ZVTX/

Source: security-officer@isc.org

https://security.gentoo.org/glsa/202210-25

Source: security-officer@isc.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20211118-0002/

Source: security-officer@isc.org

Third Party Advisory

https://www.debian.org/security/2021/dsa-4994

Source: security-officer@isc.org

Third Party Advisory

https://www.oracle.com/security-alerts/cpuapr2022.html

Source: security-officer@isc.org

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf