CVE-2021-25214

MEDIUM 6.5CVE-2021-25214 · Published 29/04/2021 · updated 17/06/2026

In short

CVE-2021-25214 is a MEDIUM (CVSS 6.5) vulnerability affecting bind (isc), sinec infrastructure network services (siemens).
Chance of exploitation in the next 30 days (EPSS): 6.4%, higher than 93.7% of all vulnerabilities.
Fix: update to 9.16.15, 9.17.12, 9.11.31, 1.0.1.1 or later.

Package	Affected versions	Patched versions
bind isc	`= 9.10.5= 9.10.7= 9.11.12= 9.11.21= 9.11.27= 9.11.29= 9.11.3= 9.11.5= 9.11.6= 9.11.7= 9.11.8= 9.16.11= 9.16.13= 9.16.8= 9.9.12= 9.9.13= 9.9.3≥ 9.12.0, < 9.16.15≥ 9.17.0, < 9.17.12≥ 9.8.5, ≤ 9.8.8≥ 9.9.3, < 9.11.31`	`9.16.159.17.129.11.31`
sinec infrastructure network services siemens	`< 1.0.1.1`	`1.0.1.1`

Description

In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a malformed IXFR triggering the flaw described above, the named process will terminate due to a failed assertion the next time the transferred secondary zone is refreshed.

References

openwall.com/lists/oss-security/2021/04/29/1 · Mailing List
openwall.com/lists/oss-security/2021/04/29/2 · Mailing List
openwall.com/lists/oss-security/2021/04/29/3 · Mailing List
openwall.com/lists/oss-security/2021/04/29/4 · Mailing List
cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf · Patch
kb.isc.org/v1/docs/cve-2021-25214 · Vendor Advisory
lists.debian.org/debian-lts-announce/2021/05/msg00001.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VEC2XG4Q2ODTN2C4CGXEIXU3EUTBMK7L
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDSRPCJQ7MZC6CENH5PO3VQOFI7VSWBE
security.netapp.com/advisory/ntap-20210521-0006

More vulnerabilities in bind

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

bind

isc

= 9.10.5= 9.10.7= 9.11.12= 9.11.21= 9.11.27= 9.11.29= 9.11.3= 9.11.5= 9.11.6= 9.11.7= 9.11.8= 9.16.11= 9.16.13= 9.16.8= 9.9.12= 9.9.13= 9.9.3≥ 9.12.0, < 9.16.15≥ 9.17.0, < 9.17.12≥ 9.8.5, ≤ 9.8.8≥ 9.9.3, < 9.11.31

9.16.159.17.129.11.31

sinec infrastructure network services

siemens

< 1.0.1.1

1.0.1.1

Description

More vulnerabilities in bind

See all →