CVE-2021-25219

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-25219
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-25219.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-25219
Downstream
Related
Published
2021-10-27T21:15:07.613Z
Modified
2026-07-08T05:56:54.865143539Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
[none]
Details

In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "fixed": "1.0.1.1"
                }
            ],
            "source": "CPE_RANGE",
            "vendor_product": "siemens:sinec_infrastructure_network_services"
        },
        {
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "9.0"
                },
                {
                    "last_affected": "9.0"
                },
                {
                    "introduced": "10.0"
                },
                {
                    "last_affected": "10.0"
                },
                {
                    "introduced": "11.0"
                },
                {
                    "last_affected": "11.0"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "debian:debian_linux"
        },
        {
            "cpes": [
                "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "33"
                },
                {
                    "last_affected": "33"
                },
                {
                    "introduced": "34"
                },
                {
                    "last_affected": "34"
                },
                {
                    "introduced": "35"
                },
                {
                    "last_affected": "35"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "fedoraproject:fedora"
        },
        {
            "cpes": [
                "cpe:2.3:a:isc:bind:9.11.12:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.21:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.27:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.29:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.35:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.5:s3:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.5:s5:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.5:s6:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.8:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.16.11:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.16.13:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.16.21:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.16.8:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.9.13:s1:*:*:supported_preview:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "9.9.13-s1"
                },
                {
                    "last_affected": "9.9.13-s1"
                },
                {
                    "introduced": "9.9.13-s1"
                },
                {
                    "last_affected": "9.9.13-s1"
                },
                {
                    "introduced": "9.11.5-s3"
                },
                {
                    "last_affected": "9.11.5-s3"
                },
                {
                    "introduced": "9.11.5-s3"
                },
                {
                    "last_affected": "9.11.5-s3"
                },
                {
                    "introduced": "9.11.5-s5"
                },
                {
                    "last_affected": "9.11.5-s5"
                },
                {
                    "introduced": "9.11.5-s5"
                },
                {
                    "last_affected": "9.11.5-s5"
                },
                {
                    "introduced": "9.11.5-s6"
                },
                {
                    "last_affected": "9.11.5-s6"
                },
                {
                    "introduced": "9.11.5-s6"
                },
                {
                    "last_affected": "9.11.5-s6"
                },
                {
                    "introduced": "9.11.7-s1"
                },
                {
                    "last_affected": "9.11.7-s1"
                },
                {
                    "introduced": "9.11.7-s1"
                },
                {
                    "last_affected": "9.11.7-s1"
                },
                {
                    "introduced": "9.11.8-s1"
                },
                {
                    "last_affected": "9.11.8-s1"
                },
                {
                    "introduced": "9.11.8-s1"
                },
                {
                    "last_affected": "9.11.8-s1"
                },
                {
                    "introduced": "9.11.12-s1"
                },
                {
                    "last_affected": "9.11.12-s1"
                },
                {
                    "introduced": "9.11.12-s1"
                },
                {
                    "last_affected": "9.11.12-s1"
                },
                {
                    "introduced": "9.11.21-s1"
                },
                {
                    "last_affected": "9.11.21-s1"
                },
                {
                    "introduced": "9.11.21-s1"
                },
                {
                    "last_affected": "9.11.21-s1"
                },
                {
                    "introduced": "9.11.27-s1"
                },
                {
                    "last_affected": "9.11.27-s1"
                },
                {
                    "introduced": "9.11.27-s1"
                },
                {
                    "last_affected": "9.11.27-s1"
                },
                {
                    "introduced": "9.11.29-s1"
                },
                {
                    "last_affected": "9.11.29-s1"
                },
                {
                    "introduced": "9.11.29-s1"
                },
                {
                    "last_affected": "9.11.29-s1"
                },
                {
                    "introduced": "9.11.35-s1"
                },
                {
                    "last_affected": "9.11.35-s1"
                },
                {
                    "introduced": "9.11.35-s1"
                },
                {
                    "last_affected": "9.11.35-s1"
                },
                {
                    "introduced": "9.16.8-s1"
                },
                {
                    "last_affected": "9.16.8-s1"
                },
                {
                    "introduced": "9.16.8-s1"
                },
                {
                    "last_affected": "9.16.8-s1"
                },
                {
                    "introduced": "9.16.11-s1"
                },
                {
                    "last_affected": "9.16.11-s1"
                },
                {
                    "introduced": "9.16.11-s1"
                },
                {
                    "last_affected": "9.16.11-s1"
                },
                {
                    "introduced": "9.16.13-s1"
                },
                {
                    "last_affected": "9.16.13-s1"
                },
                {
                    "introduced": "9.16.13-s1"
                },
                {
                    "last_affected": "9.16.13-s1"
                },
                {
                    "introduced": "9.16.21-s1"
                },
                {
                    "last_affected": "9.16.21-s1"
                },
                {
                    "introduced": "9.16.21-s1"
                },
                {
                    "last_affected": "9.16.21-s1"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "isc:bind"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "12.2.1.3.0"
                },
                {
                    "last_affected": "12.2.1.3.0"
                },
                {
                    "introduced": "12.2.1.4.0"
                },
                {
                    "last_affected": "12.2.1.4.0"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "oracle:http_server"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "8.8"
                },
                {
                    "last_affected": "8.8"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "oracle:zfs_storage_appliance_kit"
        }
    ]
}
References

Affected packages

Git / github.com/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://github.com/isc-projects/bind9
Events
Introduced
e8a547a3ebd21845a311580c772606e14c2eccfe
Fixed
68dbd5b966f4ecea28ed4915580edd330bc481a3
Introduced
71a40862c0be867999867cd99e21c2266a5e452b
Fixed
59bfaba3250b291462940df5950e0098a6abb324
Introduced
04ca7cc4b6993f47ea61852c759d047c83be7b3f
Fixed
b63de6b58673553e68bcc576031d981b740bdbd2
Introduced
1c59cea1c0e26e2da3f2afb90200bfe9f7748c03
Last affected
eba38b89007f65bc6c1fdd2451034bbe3908b9a4
Database specific 
{
    "cpe": [
        "cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:supported_preview:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.12:s1:*:*:supported_preview:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.5:s1:*:*:supported_preview:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.7:s1:*:*:supported_preview:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:*"
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "extracted_events": [
        {
            "introduced": "9.3.0"
        },
        {
            "fixed": "9.11.36"
        },
        {
            "introduced": "9.12.0"
        },
        {
            "fixed": "9.16.22"
        },
        {
            "introduced": "9.17.0"
        },
        {
            "fixed": "9.17.19"
        },
        {
            "introduced": "9.9.3-s1"
        },
        {
            "last_affected": "9.9.3-s1"
        },
        {
            "introduced": "9.9.12-s1"
        },
        {
            "last_affected": "9.9.12-s1"
        },
        {
            "introduced": "9.10.5-s1"
        },
        {
            "last_affected": "9.10.5-s1"
        },
        {
            "introduced": "9.10.7-s1"
        },
        {
            "last_affected": "9.10.7-s1"
        },
        {
            "introduced": "9.11.3-s1"
        },
        {
            "last_affected": "9.11.3-s1"
        },
        {
            "introduced": "9.11.6-s1"
        },
        {
            "last_affected": "9.11.6-s1"
        }
    ]
}

Affected versions

9.*
9.10.5-s1
9.10.7-s1
9.11.3-s1
9.11.6-s1
9.9.12-s1
9.9.3-s1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-25219.json"

Git / gitlab.isc.org/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events
Introduced
e8a547a3ebd21845a311580c772606e14c2eccfe
Fixed
68dbd5b966f4ecea28ed4915580edd330bc481a3
Introduced
71a40862c0be867999867cd99e21c2266a5e452b
Fixed
59bfaba3250b291462940df5950e0098a6abb324
Introduced
04ca7cc4b6993f47ea61852c759d047c83be7b3f
Fixed
b63de6b58673553e68bcc576031d981b740bdbd2
Introduced
1c59cea1c0e26e2da3f2afb90200bfe9f7748c03
Last affected
eba38b89007f65bc6c1fdd2451034bbe3908b9a4
Database specific 
{
    "cpe": [
        "cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:supported_preview:*:*:*",
        "cpe:2.3:a:isc:bind:9.9.12:s1:*:*:supported_preview:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.5:s1:*:*:supported_preview:*:*:*",
        "cpe:2.3:a:isc:bind:9.10.7:s1:*:*:supported_preview:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:*"
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "extracted_events": [
        {
            "introduced": "9.3.0"
        },
        {
            "fixed": "9.11.36"
        },
        {
            "introduced": "9.12.0"
        },
        {
            "fixed": "9.16.22"
        },
        {
            "introduced": "9.17.0"
        },
        {
            "fixed": "9.17.19"
        },
        {
            "introduced": "9.9.3-s1"
        },
        {
            "last_affected": "9.9.3-s1"
        },
        {
            "introduced": "9.9.12-s1"
        },
        {
            "last_affected": "9.9.12-s1"
        },
        {
            "introduced": "9.10.5-s1"
        },
        {
            "last_affected": "9.10.5-s1"
        },
        {
            "introduced": "9.10.7-s1"
        },
        {
            "last_affected": "9.10.7-s1"
        },
        {
            "introduced": "9.11.3-s1"
        },
        {
            "last_affected": "9.11.3-s1"
        },
        {
            "introduced": "9.11.6-s1"
        },
        {
            "last_affected": "9.11.6-s1"
        }
    ]
}

Affected versions

9.*
9.10.5-s1
9.10.7-s1
9.11.3-s1
9.11.6-s1
9.9.12-s1
9.9.3-s1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-25219.json"