CVE-2021-25220medium

CVE-2021-25220: medium-severity vulnerability in ISC BIND

DNS forwarders - cache poisoning vulnerability

Published · Updated

Follow this CVE+ Monitor BIND+ Monitor bind9

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 3.5%
BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Affected products
ISC · BIND
Related CVEs — ISC BIND

In the same product, most dangerous first.

CVE-2022-0396MEDIUMDoS from specifically crafted TCP packetsEPSS 2.7%CVE-2022-0635HIGHCVE-2022-0635EPSS 1.4%CVE-2022-0667HIGHAssertion failure on delayed DS lookupEPSS 1.4%