csaf_redhat - rhsa-2021

rhsa-2021_1476

Vulnerability from csaf_redhat

Published

2021-05-03 06:18

Modified

2024-11-22 16:52

Summary

Red Hat Security Advisory: bind security update

Notes

Topic

An update for bind is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself (CVE-2021-25215) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for bind is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind: An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself (CVE-2021-25215)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2021:1476",
        "url": "https://access.redhat.com/errata/RHSA-2021:1476"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1953857",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1953857"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1476.json"
      }
    ],
    "title": "Red Hat Security Advisory: bind security update",
    "tracking": {
      "current_release_date": "2024-11-22T16:52:46+00:00",
      "generator": {
        "date": "2024-11-22T16:52:46+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2021:1476",
      "initial_release_date": "2021-05-03T06:18:13+00:00",
      "revision_history": [
        {
          "date": "2021-05-03T06:18:13+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2021-05-03T06:18:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T16:52:46+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server AUS (v. 7.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server AUS (v. 7.2)",
                  "product_id": "7Server-7.2.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:7.2::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
                  "product_id": "7Server-optional-7.2.AUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:rhel_aus:7.2::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind-32:9.9.4-29.el7_2.11.src",
                "product": {
                  "name": "bind-32:9.9.4-29.el7_2.11.src",
                  "product_id": "bind-32:9.9.4-29.el7_2.11.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind@9.9.4-29.el7_2.11?arch=src\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind-32:9.9.4-29.el7_2.11.x86_64",
                "product": {
                  "name": "bind-32:9.9.4-29.el7_2.11.x86_64",
                  "product_id": "bind-32:9.9.4-29.el7_2.11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind@9.9.4-29.el7_2.11?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-chroot-32:9.9.4-29.el7_2.11.x86_64",
                "product": {
                  "name": "bind-chroot-32:9.9.4-29.el7_2.11.x86_64",
                  "product_id": "bind-chroot-32:9.9.4-29.el7_2.11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-chroot@9.9.4-29.el7_2.11?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-libs-32:9.9.4-29.el7_2.11.x86_64",
                "product": {
                  "name": "bind-libs-32:9.9.4-29.el7_2.11.x86_64",
                  "product_id": "bind-libs-32:9.9.4-29.el7_2.11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-libs@9.9.4-29.el7_2.11?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-libs-lite-32:9.9.4-29.el7_2.11.x86_64",
                "product": {
                  "name": "bind-libs-lite-32:9.9.4-29.el7_2.11.x86_64",
                  "product_id": "bind-libs-lite-32:9.9.4-29.el7_2.11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-libs-lite@9.9.4-29.el7_2.11?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-pkcs11-32:9.9.4-29.el7_2.11.x86_64",
                "product": {
                  "name": "bind-pkcs11-32:9.9.4-29.el7_2.11.x86_64",
                  "product_id": "bind-pkcs11-32:9.9.4-29.el7_2.11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-pkcs11@9.9.4-29.el7_2.11?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-pkcs11-libs-32:9.9.4-29.el7_2.11.x86_64",
                "product": {
                  "name": "bind-pkcs11-libs-32:9.9.4-29.el7_2.11.x86_64",
                  "product_id": "bind-pkcs11-libs-32:9.9.4-29.el7_2.11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-pkcs11-libs@9.9.4-29.el7_2.11?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-pkcs11-utils-32:9.9.4-29.el7_2.11.x86_64",
                "product": {
                  "name": "bind-pkcs11-utils-32:9.9.4-29.el7_2.11.x86_64",
                  "product_id": "bind-pkcs11-utils-32:9.9.4-29.el7_2.11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-pkcs11-utils@9.9.4-29.el7_2.11?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-utils-32:9.9.4-29.el7_2.11.x86_64",
                "product": {
                  "name": "bind-utils-32:9.9.4-29.el7_2.11.x86_64",
                  "product_id": "bind-utils-32:9.9.4-29.el7_2.11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-utils@9.9.4-29.el7_2.11?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-debuginfo-32:9.9.4-29.el7_2.11.x86_64",
                "product": {
                  "name": "bind-debuginfo-32:9.9.4-29.el7_2.11.x86_64",
                  "product_id": "bind-debuginfo-32:9.9.4-29.el7_2.11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-debuginfo@9.9.4-29.el7_2.11?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-devel-32:9.9.4-29.el7_2.11.x86_64",
                "product": {
                  "name": "bind-devel-32:9.9.4-29.el7_2.11.x86_64",
                  "product_id": "bind-devel-32:9.9.4-29.el7_2.11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-devel@9.9.4-29.el7_2.11?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-lite-devel-32:9.9.4-29.el7_2.11.x86_64",
                "product": {
                  "name": "bind-lite-devel-32:9.9.4-29.el7_2.11.x86_64",
                  "product_id": "bind-lite-devel-32:9.9.4-29.el7_2.11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-lite-devel@9.9.4-29.el7_2.11?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-pkcs11-devel-32:9.9.4-29.el7_2.11.x86_64",
                "product": {
                  "name": "bind-pkcs11-devel-32:9.9.4-29.el7_2.11.x86_64",
                  "product_id": "bind-pkcs11-devel-32:9.9.4-29.el7_2.11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-pkcs11-devel@9.9.4-29.el7_2.11?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-sdb-32:9.9.4-29.el7_2.11.x86_64",
                "product": {
                  "name": "bind-sdb-32:9.9.4-29.el7_2.11.x86_64",
                  "product_id": "bind-sdb-32:9.9.4-29.el7_2.11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-sdb@9.9.4-29.el7_2.11?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-sdb-chroot-32:9.9.4-29.el7_2.11.x86_64",
                "product": {
                  "name": "bind-sdb-chroot-32:9.9.4-29.el7_2.11.x86_64",
                  "product_id": "bind-sdb-chroot-32:9.9.4-29.el7_2.11.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-sdb-chroot@9.9.4-29.el7_2.11?arch=x86_64\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind-libs-32:9.9.4-29.el7_2.11.i686",
                "product": {
                  "name": "bind-libs-32:9.9.4-29.el7_2.11.i686",
                  "product_id": "bind-libs-32:9.9.4-29.el7_2.11.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-libs@9.9.4-29.el7_2.11?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-libs-lite-32:9.9.4-29.el7_2.11.i686",
                "product": {
                  "name": "bind-libs-lite-32:9.9.4-29.el7_2.11.i686",
                  "product_id": "bind-libs-lite-32:9.9.4-29.el7_2.11.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-libs-lite@9.9.4-29.el7_2.11?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-pkcs11-libs-32:9.9.4-29.el7_2.11.i686",
                "product": {
                  "name": "bind-pkcs11-libs-32:9.9.4-29.el7_2.11.i686",
                  "product_id": "bind-pkcs11-libs-32:9.9.4-29.el7_2.11.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-pkcs11-libs@9.9.4-29.el7_2.11?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-debuginfo-32:9.9.4-29.el7_2.11.i686",
                "product": {
                  "name": "bind-debuginfo-32:9.9.4-29.el7_2.11.i686",
                  "product_id": "bind-debuginfo-32:9.9.4-29.el7_2.11.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-debuginfo@9.9.4-29.el7_2.11?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-devel-32:9.9.4-29.el7_2.11.i686",
                "product": {
                  "name": "bind-devel-32:9.9.4-29.el7_2.11.i686",
                  "product_id": "bind-devel-32:9.9.4-29.el7_2.11.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-devel@9.9.4-29.el7_2.11?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-lite-devel-32:9.9.4-29.el7_2.11.i686",
                "product": {
                  "name": "bind-lite-devel-32:9.9.4-29.el7_2.11.i686",
                  "product_id": "bind-lite-devel-32:9.9.4-29.el7_2.11.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-lite-devel@9.9.4-29.el7_2.11?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-pkcs11-devel-32:9.9.4-29.el7_2.11.i686",
                "product": {
                  "name": "bind-pkcs11-devel-32:9.9.4-29.el7_2.11.i686",
                  "product_id": "bind-pkcs11-devel-32:9.9.4-29.el7_2.11.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-pkcs11-devel@9.9.4-29.el7_2.11?arch=i686\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind-license-32:9.9.4-29.el7_2.11.noarch",
                "product": {
                  "name": "bind-license-32:9.9.4-29.el7_2.11.noarch",
                  "product_id": "bind-license-32:9.9.4-29.el7_2.11.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-license@9.9.4-29.el7_2.11?arch=noarch\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-32:9.9.4-29.el7_2.11.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-32:9.9.4-29.el7_2.11.src"
        },
        "product_reference": "bind-32:9.9.4-29.el7_2.11.src",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-chroot-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-chroot-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-chroot-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debuginfo-32:9.9.4-29.el7_2.11.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.i686"
        },
        "product_reference": "bind-debuginfo-32:9.9.4-29.el7_2.11.i686",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debuginfo-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-debuginfo-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-devel-32:9.9.4-29.el7_2.11.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.i686"
        },
        "product_reference": "bind-devel-32:9.9.4-29.el7_2.11.i686",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-devel-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-devel-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-32:9.9.4-29.el7_2.11.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.i686"
        },
        "product_reference": "bind-libs-32:9.9.4-29.el7_2.11.i686",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-libs-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-lite-32:9.9.4-29.el7_2.11.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.i686"
        },
        "product_reference": "bind-libs-lite-32:9.9.4-29.el7_2.11.i686",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-lite-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-libs-lite-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-license-32:9.9.4-29.el7_2.11.noarch as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-license-32:9.9.4-29.el7_2.11.noarch"
        },
        "product_reference": "bind-license-32:9.9.4-29.el7_2.11.noarch",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-lite-devel-32:9.9.4-29.el7_2.11.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.i686"
        },
        "product_reference": "bind-lite-devel-32:9.9.4-29.el7_2.11.i686",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-lite-devel-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-lite-devel-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-pkcs11-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-pkcs11-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-pkcs11-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-pkcs11-devel-32:9.9.4-29.el7_2.11.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.i686"
        },
        "product_reference": "bind-pkcs11-devel-32:9.9.4-29.el7_2.11.i686",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-pkcs11-devel-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-pkcs11-devel-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-pkcs11-libs-32:9.9.4-29.el7_2.11.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.i686"
        },
        "product_reference": "bind-pkcs11-libs-32:9.9.4-29.el7_2.11.i686",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-pkcs11-libs-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-pkcs11-libs-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-pkcs11-utils-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-pkcs11-utils-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-pkcs11-utils-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-sdb-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-sdb-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-sdb-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-sdb-chroot-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-sdb-chroot-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-sdb-chroot-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-utils-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)",
          "product_id": "7Server-7.2.AUS:bind-utils-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-utils-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-32:9.9.4-29.el7_2.11.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-32:9.9.4-29.el7_2.11.src"
        },
        "product_reference": "bind-32:9.9.4-29.el7_2.11.src",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-chroot-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-chroot-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-chroot-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debuginfo-32:9.9.4-29.el7_2.11.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.i686"
        },
        "product_reference": "bind-debuginfo-32:9.9.4-29.el7_2.11.i686",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debuginfo-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-debuginfo-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-devel-32:9.9.4-29.el7_2.11.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.i686"
        },
        "product_reference": "bind-devel-32:9.9.4-29.el7_2.11.i686",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-devel-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-devel-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-32:9.9.4-29.el7_2.11.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.i686"
        },
        "product_reference": "bind-libs-32:9.9.4-29.el7_2.11.i686",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-libs-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-lite-32:9.9.4-29.el7_2.11.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.i686"
        },
        "product_reference": "bind-libs-lite-32:9.9.4-29.el7_2.11.i686",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-lite-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-libs-lite-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-license-32:9.9.4-29.el7_2.11.noarch as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-license-32:9.9.4-29.el7_2.11.noarch"
        },
        "product_reference": "bind-license-32:9.9.4-29.el7_2.11.noarch",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-lite-devel-32:9.9.4-29.el7_2.11.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.i686"
        },
        "product_reference": "bind-lite-devel-32:9.9.4-29.el7_2.11.i686",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-lite-devel-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-lite-devel-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-pkcs11-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-pkcs11-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-pkcs11-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-pkcs11-devel-32:9.9.4-29.el7_2.11.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.i686"
        },
        "product_reference": "bind-pkcs11-devel-32:9.9.4-29.el7_2.11.i686",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-pkcs11-devel-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-pkcs11-devel-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-pkcs11-libs-32:9.9.4-29.el7_2.11.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.i686"
        },
        "product_reference": "bind-pkcs11-libs-32:9.9.4-29.el7_2.11.i686",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-pkcs11-libs-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-pkcs11-libs-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-pkcs11-utils-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-pkcs11-utils-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-pkcs11-utils-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-sdb-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-sdb-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-sdb-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-sdb-chroot-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-sdb-chroot-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-sdb-chroot-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-utils-32:9.9.4-29.el7_2.11.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)",
          "product_id": "7Server-optional-7.2.AUS:bind-utils-32:9.9.4-29.el7_2.11.x86_64"
        },
        "product_reference": "bind-utils-32:9.9.4-29.el7_2.11.x86_64",
        "relates_to_product_reference": "7Server-optional-7.2.AUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "ISC"
          ]
        },
        {
          "names": [
            "Siva Kakarla"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2021-25215",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2021-04-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1953857"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in bind. The way DNAME records are processed may trigger the same RRset to the ANSWER section to be added more than once which causes an assertion check to fail. The highest threat from this flaw is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-7.2.AUS:bind-32:9.9.4-29.el7_2.11.src",
          "7Server-7.2.AUS:bind-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-7.2.AUS:bind-chroot-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.i686",
          "7Server-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.i686",
          "7Server-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.i686",
          "7Server-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.i686",
          "7Server-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-7.2.AUS:bind-license-32:9.9.4-29.el7_2.11.noarch",
          "7Server-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.i686",
          "7Server-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-7.2.AUS:bind-pkcs11-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.i686",
          "7Server-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.i686",
          "7Server-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-7.2.AUS:bind-pkcs11-utils-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-7.2.AUS:bind-sdb-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-7.2.AUS:bind-sdb-chroot-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-7.2.AUS:bind-utils-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-optional-7.2.AUS:bind-32:9.9.4-29.el7_2.11.src",
          "7Server-optional-7.2.AUS:bind-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-optional-7.2.AUS:bind-chroot-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-optional-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.i686",
          "7Server-optional-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-optional-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.i686",
          "7Server-optional-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-optional-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.i686",
          "7Server-optional-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-optional-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.i686",
          "7Server-optional-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-optional-7.2.AUS:bind-license-32:9.9.4-29.el7_2.11.noarch",
          "7Server-optional-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.i686",
          "7Server-optional-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-optional-7.2.AUS:bind-pkcs11-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-optional-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.i686",
          "7Server-optional-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-optional-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.i686",
          "7Server-optional-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-optional-7.2.AUS:bind-pkcs11-utils-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-optional-7.2.AUS:bind-sdb-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-optional-7.2.AUS:bind-sdb-chroot-32:9.9.4-29.el7_2.11.x86_64",
          "7Server-optional-7.2.AUS:bind-utils-32:9.9.4-29.el7_2.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-25215"
        },
        {
          "category": "external",
          "summary": "RHBZ#1953857",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1953857"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-25215",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-25215"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-25215",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25215"
        },
        {
          "category": "external",
          "summary": "https://kb.isc.org/docs/cve-2021-25215",
          "url": "https://kb.isc.org/docs/cve-2021-25215"
        }
      ],
      "release_date": "2021-04-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-05-03T06:18:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, the BIND daemon (named) will be restarted automatically.",
          "product_ids": [
            "7Server-7.2.AUS:bind-32:9.9.4-29.el7_2.11.src",
            "7Server-7.2.AUS:bind-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-chroot-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-license-32:9.9.4-29.el7_2.11.noarch",
            "7Server-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-pkcs11-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-pkcs11-utils-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-sdb-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-sdb-chroot-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-utils-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-32:9.9.4-29.el7_2.11.src",
            "7Server-optional-7.2.AUS:bind-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-chroot-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-license-32:9.9.4-29.el7_2.11.noarch",
            "7Server-optional-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-pkcs11-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-pkcs11-utils-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-sdb-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-sdb-chroot-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-utils-32:9.9.4-29.el7_2.11.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:1476"
        },
        {
          "category": "workaround",
          "details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.",
          "product_ids": [
            "7Server-7.2.AUS:bind-32:9.9.4-29.el7_2.11.src",
            "7Server-7.2.AUS:bind-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-chroot-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-license-32:9.9.4-29.el7_2.11.noarch",
            "7Server-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-pkcs11-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-pkcs11-utils-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-sdb-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-sdb-chroot-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-utils-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-32:9.9.4-29.el7_2.11.src",
            "7Server-optional-7.2.AUS:bind-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-chroot-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-license-32:9.9.4-29.el7_2.11.noarch",
            "7Server-optional-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-pkcs11-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-pkcs11-utils-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-sdb-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-sdb-chroot-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-utils-32:9.9.4-29.el7_2.11.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-7.2.AUS:bind-32:9.9.4-29.el7_2.11.src",
            "7Server-7.2.AUS:bind-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-chroot-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-license-32:9.9.4-29.el7_2.11.noarch",
            "7Server-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-pkcs11-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.i686",
            "7Server-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-pkcs11-utils-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-sdb-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-sdb-chroot-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-7.2.AUS:bind-utils-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-32:9.9.4-29.el7_2.11.src",
            "7Server-optional-7.2.AUS:bind-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-chroot-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-debuginfo-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-libs-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-libs-lite-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-license-32:9.9.4-29.el7_2.11.noarch",
            "7Server-optional-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-lite-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-pkcs11-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-pkcs11-devel-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.i686",
            "7Server-optional-7.2.AUS:bind-pkcs11-libs-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-pkcs11-utils-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-sdb-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-sdb-chroot-32:9.9.4-29.el7_2.11.x86_64",
            "7Server-optional-7.2.AUS:bind-utils-32:9.9.4-29.el7_2.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself"
    }
  ]
}

cve-2021-25215

Vulnerability from cvelistv5

Published

2021-04-29 00:55

Modified

2024-09-16 22:02

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a query for a record triggering the flaw described above, the named process will terminate due to a failed assertion check. The vulnerability affects all currently maintained BIND 9 branches (9.11, 9.11-S, 9.16, 9.16-S, 9.17) as well as all other versions of BIND 9.

References

▼	URL	Tags
	https://kb.isc.org/v1/docs/cve-2021-25215	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2021/04/29/1	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2021/04/29/2	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2021/04/29/3	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2021/04/29/4	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2021/dsa-4909	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2021/05/msg00001.html	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VEC2XG4Q2ODTN2C4CGXEIXU3EUTBMK7L/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDSRPCJQ7MZC6CENH5PO3VQOFI7VSWBE/	vendor-advisory, x_refsource_FEDORA
	https://www.oracle.com/security-alerts/cpuoct2021.html	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20210521-0006/	x_refsource_CONFIRM
	https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

▼

ISC

BIND9

Version: Open Source Branches 9.0 through 9.11 9.0.0 through versions before 9.11.30
Version: Open Source Branches 9.12 through 9.16 9.12.0 through versions before 9.16.14
Version: Supported Preview Branches 9.9-S through 9.11-S 9.9.3-S1 through versions before 9.11.30-S1
Version: Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.14-S1
Version: Development Branch 9.17 9.17.0 through versiosn before 9.17.12

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T19:56:11.110Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.isc.org/v1/docs/cve-2021-25215"
          },
          {
            "name": "[oss-security] 20210428 ISC discloses three BIND vulnerabilities (CVE-2021-25214, CVE-2021-25215, and CVE-2021-25216)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/04/29/1"
          },
          {
            "name": "[oss-security] 20210429 Re: ISC discloses three BIND vulnerabilities (CVE-2021-25214, CVE-2021-25215, and CVE-2021-25216)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/04/29/2"
          },
          {
            "name": "[oss-security] 20210429 Re: ISC discloses three BIND vulnerabilities (CVE-2021-25214, CVE-2021-25215, and CVE-2021-25216)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/04/29/3"
          },
          {
            "name": "[oss-security] 20210429 Re: ISC discloses three BIND vulnerabilities (CVE-2021-25214, CVE-2021-25215, and CVE-2021-25216)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/04/29/4"
          },
          {
            "name": "DSA-4909",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2021/dsa-4909"
          },
          {
            "name": "[debian-lts-announce] 20210504 [SECURITY] [DLA 2647-1] bind9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00001.html"
          },
          {
            "name": "FEDORA-2021-ace61cbee1",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VEC2XG4Q2ODTN2C4CGXEIXU3EUTBMK7L/"
          },
          {
            "name": "FEDORA-2021-47f23870ec",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDSRPCJQ7MZC6CENH5PO3VQOFI7VSWBE/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210521-0006/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BIND9",
          "vendor": "ISC",
          "versions": [
            {
              "status": "affected",
              "version": "Open Source Branches 9.0 through 9.11 9.0.0 through versions before 9.11.30"
            },
            {
              "status": "affected",
              "version": "Open Source Branches 9.12 through 9.16 9.12.0 through versions before 9.16.14"
            },
            {
              "status": "affected",
              "version": "Supported Preview Branches 9.9-S through 9.11-S 9.9.3-S1 through versions before 9.11.30-S1"
            },
            {
              "status": "affected",
              "version": "Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.14-S1"
            },
            {
              "status": "affected",
              "version": "Development Branch 9.17 9.17.0 through versiosn before 9.17.12"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ISC would like to thank Siva Kakarla for bringing this vulnerability to our attention."
        }
      ],
      "datePublic": "2021-04-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In BIND 9.0.0 -\u003e 9.11.29, 9.12.0 -\u003e 9.16.13, and versions BIND 9.9.3-S1 -\u003e 9.11.29-S1 and 9.16.8-S1 -\u003e 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -\u003e 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a query for a record triggering the flaw described above, the named process will terminate due to a failed assertion check. The vulnerability affects all currently maintained BIND 9 branches (9.11, 9.11-S, 9.16, 9.16-S, 9.17) as well as all other versions of BIND 9."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "We are not aware of any active exploits."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "DNAME records, described in RFC 6672, provide a way to redirect a subtree of the domain name tree in the DNS. A flaw in the way named processes these records may trigger an attempt to add the same RRset to the ANSWER section more than once. This causes an assertion check in BIND to fail.  DNAME records are processed by both authoritative and recursive servers. For authoritative servers, the DNAME record triggering the flaw can be retrieved from a zone database. For servers performing recursion, such a record is processed in the course of a query sent to an authoritative server.  Affects BIND 9.0.0 -\u003e 9.11.29, 9.12.0 -\u003e 9.16.13, and versions BIND 9.9.3-S1 -\u003e 9.11.29-S1 and 9.16.8-S1 -\u003e 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -\u003e 9.17.11 of the BIND 9.17 development branch.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-03-08T14:08:28",
        "orgId": "404fd4d2-a609-4245-b543-2c944a302a22",
        "shortName": "isc"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.isc.org/v1/docs/cve-2021-25215"
        },
        {
          "name": "[oss-security] 20210428 ISC discloses three BIND vulnerabilities (CVE-2021-25214, CVE-2021-25215, and CVE-2021-25216)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/04/29/1"
        },
        {
          "name": "[oss-security] 20210429 Re: ISC discloses three BIND vulnerabilities (CVE-2021-25214, CVE-2021-25215, and CVE-2021-25216)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/04/29/2"
        },
        {
          "name": "[oss-security] 20210429 Re: ISC discloses three BIND vulnerabilities (CVE-2021-25214, CVE-2021-25215, and CVE-2021-25216)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/04/29/3"
        },
        {
          "name": "[oss-security] 20210429 Re: ISC discloses three BIND vulnerabilities (CVE-2021-25214, CVE-2021-25215, and CVE-2021-25216)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/04/29/4"
        },
        {
          "name": "DSA-4909",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2021/dsa-4909"
        },
        {
          "name": "[debian-lts-announce] 20210504 [SECURITY] [DLA 2647-1] bind9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00001.html"
        },
        {
          "name": "FEDORA-2021-ace61cbee1",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VEC2XG4Q2ODTN2C4CGXEIXU3EUTBMK7L/"
        },
        {
          "name": "FEDORA-2021-47f23870ec",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDSRPCJQ7MZC6CENH5PO3VQOFI7VSWBE/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20210521-0006/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to the patched release most closely related to your current version of BIND:\n\n    BIND 9.11.31\n    BIND 9.16.15\n    BIND 9.17.12\n\nBIND Supported Preview Edition is a special feature preview branch of BIND provided to eligible ISC support customers.\n\n    BIND 9.11.31-S1\n    BIND 9.16.15-S1"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself",
      "workarounds": [
        {
          "lang": "en",
          "value": "No workarounds known."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security-officer@isc.org",
          "DATE_PUBLIC": "2021-04-28T20:20:01.000Z",
          "ID": "CVE-2021-25215",
          "STATE": "PUBLIC",
          "TITLE": "An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BIND9",
                      "version": {
                        "version_data": [
                          {
                            "version_name": "Open Source Branches 9.0 through 9.11",
                            "version_value": "9.0.0 through versions before 9.11.30"
                          },
                          {
                            "version_name": "Open Source Branches 9.12 through 9.16",
                            "version_value": "9.12.0 through versions before 9.16.14"
                          },
                          {
                            "version_name": "Supported Preview Branches 9.9-S through 9.11-S",
                            "version_value": "9.9.3-S1 through versions before 9.11.30-S1"
                          },
                          {
                            "version_name": "Supported Preview Branch 9.16-S",
                            "version_value": "9.16.8-S1 through versions before 9.16.14-S1"
                          },
                          {
                            "version_name": "Development Branch 9.17",
                            "version_value": "9.17.0 through versiosn before 9.17.12"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "ISC"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "ISC would like to thank Siva Kakarla for bringing this vulnerability to our attention."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In BIND 9.0.0 -\u003e 9.11.29, 9.12.0 -\u003e 9.16.13, and versions BIND 9.9.3-S1 -\u003e 9.11.29-S1 and 9.16.8-S1 -\u003e 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -\u003e 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a query for a record triggering the flaw described above, the named process will terminate due to a failed assertion check. The vulnerability affects all currently maintained BIND 9 branches (9.11, 9.11-S, 9.16, 9.16-S, 9.17) as well as all other versions of BIND 9."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "We are not aware of any active exploits."
          }
        ],
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "DNAME records, described in RFC 6672, provide a way to redirect a subtree of the domain name tree in the DNS. A flaw in the way named processes these records may trigger an attempt to add the same RRset to the ANSWER section more than once. This causes an assertion check in BIND to fail.  DNAME records are processed by both authoritative and recursive servers. For authoritative servers, the DNAME record triggering the flaw can be retrieved from a zone database. For servers performing recursion, such a record is processed in the course of a query sent to an authoritative server.  Affects BIND 9.0.0 -\u003e 9.11.29, 9.12.0 -\u003e 9.16.13, and versions BIND 9.9.3-S1 -\u003e 9.11.29-S1 and 9.16.8-S1 -\u003e 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -\u003e 9.17.11 of the BIND 9.17 development branch."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kb.isc.org/v1/docs/cve-2021-25215",
              "refsource": "CONFIRM",
              "url": "https://kb.isc.org/v1/docs/cve-2021-25215"
            },
            {
              "name": "[oss-security] 20210428 ISC discloses three BIND vulnerabilities (CVE-2021-25214, CVE-2021-25215, and CVE-2021-25216)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/04/29/1"
            },
            {
              "name": "[oss-security] 20210429 Re: ISC discloses three BIND vulnerabilities (CVE-2021-25214, CVE-2021-25215, and CVE-2021-25216)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/04/29/2"
            },
            {
              "name": "[oss-security] 20210429 Re: ISC discloses three BIND vulnerabilities (CVE-2021-25214, CVE-2021-25215, and CVE-2021-25216)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/04/29/3"
            },
            {
              "name": "[oss-security] 20210429 Re: ISC discloses three BIND vulnerabilities (CVE-2021-25214, CVE-2021-25215, and CVE-2021-25216)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/04/29/4"
            },
            {
              "name": "DSA-4909",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2021/dsa-4909"
            },
            {
              "name": "[debian-lts-announce] 20210504 [SECURITY] [DLA 2647-1] bind9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00001.html"
            },
            {
              "name": "FEDORA-2021-ace61cbee1",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VEC2XG4Q2ODTN2C4CGXEIXU3EUTBMK7L/"
            },
            {
              "name": "FEDORA-2021-47f23870ec",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDSRPCJQ7MZC6CENH5PO3VQOFI7VSWBE/"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuoct2021.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20210521-0006/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20210521-0006/"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Upgrade to the patched release most closely related to your current version of BIND:\n\n    BIND 9.11.31\n    BIND 9.16.15\n    BIND 9.17.12\n\nBIND Supported Preview Edition is a special feature preview branch of BIND provided to eligible ISC support customers.\n\n    BIND 9.11.31-S1\n    BIND 9.16.15-S1"
          }
        ],
        "source": {
          "discovery": "EXTERNAL"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "No workarounds known."
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404fd4d2-a609-4245-b543-2c944a302a22",
    "assignerShortName": "isc",
    "cveId": "CVE-2021-25215",
    "datePublished": "2021-04-29T00:55:16.726513Z",
    "dateReserved": "2021-01-15T00:00:00",
    "dateUpdated": "2024-09-16T22:02:24.791Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted