Lucene search
CloudLinuxCLSA-2021:1632261705HistorySep 21, 2021 - 10:01 p.m.
Fix of CVE: CVE-2021-25215, CVE-2021-25214, CVE-2021-25216
2021-09-2122:01:45
repo.cloudlinux.com
97
cve-2021-25215
bind
vulnerability
buffer overflow
gssapi
security policy
ixfr
named
assertion check
dname
records
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.447
Percentile
97.4%
- A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly (CVE-2021-25214)
- An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself (CVE-2021-25215)
- A second vulnerability in BIND’s GSSAPI security policy negotiation can be targeted by a buffer overflow attack (CVE-2021-25216)
Related
ubuntu
ubuntu
Bind vulnerabilities
2021-04-29 00:00:00
slackware
slackware
[slackware-security] bind
2021-04-29 01:41:22
altlinux
altlinux
Security fix for the ALT Linux 10 package bind version 9.11.31-alt1
2021-04-29 00:00:00
Security fix for the ALT Linux 9 package bind version 9.11.31-alt1
2021-05-12 00:00:00
Security fix for the ALT Linux 8 package bind version 9.10.8.P1-alt4
2021-05-13 00:00:00
archlinux
archlinux
[ASA-202104-10] bind: multiple issues
2021-04-29 00:00:00
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Bind vulnerabilities (USN-4929-1)
2021-04-30 00:00:00
Debian DLA-2647-1 : bind9 security update
2021-05-05 00:00:00
Slackware 14.0 / 14.1 / 14.2 / current : bind (SSA:2021-118-01)
2021-04-29 00:00:00
redos
redos
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:14714-1)
2021-06-09 00:00:00
Slackware: Security Advisory (SSA:2021-118-01)
2022-04-21 00:00:00
Debian: Security Advisory (DSA-4909-1)
2021-05-02 00:00:00
debian
debian
[SECURITY] [DSA 4909-1] bind9 security update
2021-05-01 09:09:48
[SECURITY] [DSA 4909-1] bind9 security update
2021-05-01 09:09:48
[SECURITY] [DLA 2647-1] bind9 security update
2021-05-04 10:21:23
photon
photon
Critical Photon OS Security Update - PHSA-2021-0240
2021-05-20 00:00:00
Critical Photon OS Security Update - PHSA-2021-0039
2021-06-07 00:00:00
osv
osv
bind9 - security update
2021-05-01 00:00:00
bind9 - security update
2021-05-04 00:00:00
bind9 vulnerabilities
2021-04-29 11:11:53
mageia
mageia
Updated bind packages fix security vulnerabilities
2021-05-23 21:45:17
Updated bind packages fix a security vulnerability
2021-06-23 20:11:28
fedora
fedora
[SECURITY] Fedora 34 Update: bind-9.16.15-1.fc34
2021-05-06 01:03:22
[SECURITY] Fedora 34 Update: bind-dyndb-ldap-11.7-3.fc34
2021-05-06 01:03:22
[SECURITY] Fedora 33 Update: bind-dyndb-ldap-11.3-7.fc33
2021-05-09 01:16:35
ibm
ibm
suse
suse
Security update for bind (important)
2021-05-04 00:00:00
Security update for bind (important)
2021-07-11 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1803
2021-07-02 16:31:31
zdi
zdi
ISC BIND TKEY Query Integer Overflow Remote Code Execution Vulnerability
2021-06-07 00:00:00
ubuntucve
ubuntucve
redhatcve
redhatcve
veracode
veracode
Denial Of Service (DoS)
2021-05-01 10:32:40
Denial Of Service(DoS)
2021-05-01 10:32:38
cisa
cisa
ISC Releases Security Advisory for BIND
2021-04-29 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-25216 affecting package bind 9.16.3-3
2021-05-16 16:46:11
CVE-2021-25214 affecting package bind 9.16.3-3
2021-05-16 16:46:11
CVE-2021-25215 affecting package bind 9.16.3-3
2021-05-16 16:46:11
f5
f5
K19443402 : BIND vulnerability CVE-2021-25216
2021-05-19 00:00:00
prion
prion
Buffer overflow
2021-04-29 01:15:00
Code injection
2021-04-29 01:15:00
cvelist
cvelist
CVE-2021-25216 A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack
2021-04-29 00:55:17
debiancve
debiancve
CVE-2021-25216
2021-04-29 01:15:08
CVE-2021-25214
2021-04-29 01:15:07
alpinelinux
alpinelinux
CVE-2021-25216
2021-04-29 01:15:08
CVE-2021-25214
2021-04-29 01:15:07
nvd
nvd
CVE-2021-25216
2021-04-29 01:15:08
cve
cve
CVE-2021-25216
2021-04-29 01:15:08
amazon
amazon
Medium: bind
2021-06-16 20:37:00
Important: bind
2021-05-20 15:46:00
centos
centos
bind security update
2021-09-01 13:02:58
rocky
rocky
bind security and bug fix update
2021-11-09 09:16:00
oraclelinux
oraclelinux
bind security and bug fix update
2021-11-16 00:00:00
bind security update
2021-09-01 00:00:00
bind security update
2021-05-26 00:00:00
redhat
redhat
(RHSA-2021:4384) Moderate: bind security and bug fix update
2021-11-09 09:16:00
(RHSA-2021:1478) Important: bind security update
2021-05-03 05:52:03
(RHSA-2021:1475) Important: bind security update
2021-05-03 05:51:41
almalinux
almalinux
Important: bind security update
2021-05-18 17:09:01
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.447
Percentile
97.4%
Related for CLSA-2021:1632261705