CVE-2021-25214

Katalog CVE

CVSS 6.5 · Medium EPSS 6,0%

Kerentanan Reachable Assertion pada isc bind, debian linux +13 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a malformed IXFR triggering the flaw described above, the named process will terminate due to a failed assertion the next time the transferred secondary zone is refreshed.

Rincian

Terbit di NVD

29 April 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

6,0% peluang dieksploitasi; lebih tinggi dari 93,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://kb.isc.org/v1/docs/cve-2021-25214 advisory vendor
• https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/04/29/1 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/04/29/2 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/04/29/3 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/04/29/4 mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/05/msg00001.html mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210521-0006/ advisory pihak ketiga
• https://www.debian.org/security/2021/dsa-4909 advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VEC2XG4Q2ODTN...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDSRPCJQ7MZC6...