CVE-2021-25220medium

CVE-2021-25220: falha de média gravidade em ISC BIND

DNS forwarders - cache poisoning vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar BIND+ Monitorar bind9

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.8epss 3.5%
BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Produtos afetados
ISC · BIND
CVEs relacionadas — ISC BIND

No mesmo produto, das mais perigosas para as menos.

CVE-2022-0396MEDIUMDoS from specifically crafted TCP packetsEPSS 2.7%CVE-2022-0635HIGHCVE-2022-0635EPSS 1.4%CVE-2022-0667HIGHAssertion failure on delayed DS lookupEPSS 1.4%