Vulnerability-Lookup

ubuntu-cve-2021-25219

Vulnerability from osv_ubuntu

Published

2021-10-27 00:00

Modified

2026-04-22 07:39

Summary

Details

In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing.

Severity

5.3 (Medium)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5.3 (Medium)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2021-25219	REPORT
	https://kb.isc.org/docs/cve-2021-25219	REPORT
	https://ubuntu.com/security/notices/USN-5126-1	ADVISORY
	https://ubuntu.com/security/notices/USN-5126-2	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2021-25219	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "host",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "libbind9-90",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "libdns100",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "libisc95",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "libisccc90",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "libisccfg90",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "liblwres90",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "lwresd",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.9.5.dfsg-3ubuntu0.19+esm5?arch=source\u0026distro=trusty/esm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.9.3.dfsg.P2-4ubuntu1",
        "1:9.9.3.dfsg.P2-4ubuntu2",
        "1:9.9.3.dfsg.P2-4ubuntu3",
        "1:9.9.5.dfsg-2",
        "1:9.9.5.dfsg-3",
        "1:9.9.5.dfsg-3ubuntu0.1",
        "1:9.9.5.dfsg-3ubuntu0.2",
        "1:9.9.5.dfsg-3ubuntu0.3",
        "1:9.9.5.dfsg-3ubuntu0.4",
        "1:9.9.5.dfsg-3ubuntu0.5",
        "1:9.9.5.dfsg-3ubuntu0.6",
        "1:9.9.5.dfsg-3ubuntu0.7",
        "1:9.9.5.dfsg-3ubuntu0.8",
        "1:9.9.5.dfsg-3ubuntu0.9",
        "1:9.9.5.dfsg-3ubuntu0.10",
        "1:9.9.5.dfsg-3ubuntu0.11",
        "1:9.9.5.dfsg-3ubuntu0.12",
        "1:9.9.5.dfsg-3ubuntu0.13",
        "1:9.9.5.dfsg-3ubuntu0.14",
        "1:9.9.5.dfsg-3ubuntu0.15",
        "1:9.9.5.dfsg-3ubuntu0.16",
        "1:9.9.5.dfsg-3ubuntu0.17",
        "1:9.9.5.dfsg-3ubuntu0.18",
        "1:9.9.5.dfsg-3ubuntu0.19",
        "1:9.9.5.dfsg-3ubuntu0.19+esm1",
        "1:9.9.5.dfsg-3ubuntu0.19+esm2",
        "1:9.9.5.dfsg-3ubuntu0.19+esm3",
        "1:9.9.5.dfsg-3ubuntu0.19+esm4"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "host",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libbind9-140",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libdns-export162",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libdns162",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libirs-export141",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libirs141",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libisc-export160",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libisc160",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libisccc-export140",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libisccc140",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libisccfg-export140",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libisccfg140",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "liblwres141",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "lwresd",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.10.3.dfsg.P4-8ubuntu1.19+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.9.5.dfsg-11ubuntu1",
        "1:9.9.5.dfsg-12",
        "1:9.9.5.dfsg-12.1",
        "1:9.9.5.dfsg-12.1ubuntu1",
        "1:9.10.3.dfsg.P2-4",
        "1:9.10.3.dfsg.P2-5",
        "1:9.10.3.dfsg.P4-3",
        "1:9.10.3.dfsg.P4-4",
        "1:9.10.3.dfsg.P4-5",
        "1:9.10.3.dfsg.P4-8",
        "1:9.10.3.dfsg.P4-8ubuntu1",
        "1:9.10.3.dfsg.P4-8ubuntu1.1",
        "1:9.10.3.dfsg.P4-8ubuntu1.2",
        "1:9.10.3.dfsg.P4-8ubuntu1.3",
        "1:9.10.3.dfsg.P4-8ubuntu1.4",
        "1:9.10.3.dfsg.P4-8ubuntu1.5",
        "1:9.10.3.dfsg.P4-8ubuntu1.6",
        "1:9.10.3.dfsg.P4-8ubuntu1.7",
        "1:9.10.3.dfsg.P4-8ubuntu1.8",
        "1:9.10.3.dfsg.P4-8ubuntu1.9",
        "1:9.10.3.dfsg.P4-8ubuntu1.10",
        "1:9.10.3.dfsg.P4-8ubuntu1.11",
        "1:9.10.3.dfsg.P4-8ubuntu1.12",
        "1:9.10.3.dfsg.P4-8ubuntu1.14",
        "1:9.10.3.dfsg.P4-8ubuntu1.15",
        "1:9.10.3.dfsg.P4-8ubuntu1.16",
        "1:9.10.3.dfsg.P4-8ubuntu1.17",
        "1:9.10.3.dfsg.P4-8ubuntu1.18",
        "1:9.10.3.dfsg.P4-8ubuntu1.19"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libbind9-160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libdns-export1100",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libdns1100",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libirs-export160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libirs160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libisc-export169",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libisc169",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libisccc-export160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libisccc160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libisccfg-export160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libisccfg160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "liblwres160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.11.3+dfsg-1ubuntu1.16?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.11.3+dfsg-1ubuntu1.16"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.10.3.dfsg.P4-12.6ubuntu1",
        "1:9.11.2.P1-1ubuntu2",
        "1:9.11.2.P1-1ubuntu3",
        "1:9.11.2.P1-1ubuntu4",
        "1:9.11.2.P1-1ubuntu5",
        "1:9.11.3+dfsg-1ubuntu1",
        "1:9.11.3+dfsg-1ubuntu1.1",
        "1:9.11.3+dfsg-1ubuntu1.2",
        "1:9.11.3+dfsg-1ubuntu1.3",
        "1:9.11.3+dfsg-1ubuntu1.5",
        "1:9.11.3+dfsg-1ubuntu1.7",
        "1:9.11.3+dfsg-1ubuntu1.8",
        "1:9.11.3+dfsg-1ubuntu1.9",
        "1:9.11.3+dfsg-1ubuntu1.10",
        "1:9.11.3+dfsg-1ubuntu1.11",
        "1:9.11.3+dfsg-1ubuntu1.12",
        "1:9.11.3+dfsg-1ubuntu1.13",
        "1:9.11.3+dfsg-1ubuntu1.14",
        "1:9.11.3+dfsg-1ubuntu1.15"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.16.1-0ubuntu2.9"
          },
          {
            "binary_name": "bind9-dnsutils",
            "binary_version": "1:9.16.1-0ubuntu2.9"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.16.1-0ubuntu2.9"
          },
          {
            "binary_name": "bind9-libs",
            "binary_version": "1:9.16.1-0ubuntu2.9"
          },
          {
            "binary_name": "bind9-utils",
            "binary_version": "1:9.16.1-0ubuntu2.9"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.16.1-0ubuntu2.9"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.16.1-0ubuntu2.9"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.16.1-0ubuntu2.9?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.16.1-0ubuntu2.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.11.5.P4+dfsg-5.1ubuntu2",
        "1:9.11.5.P4+dfsg-5.1ubuntu3",
        "1:9.11.5.P4+dfsg-5.1ubuntu4",
        "1:9.11.5.P4+dfsg-5.1ubuntu5",
        "1:9.11.14+dfsg-1ubuntu1",
        "1:9.11.14+dfsg-3ubuntu1",
        "1:9.16.0-1ubuntu3",
        "1:9.16.0-1ubuntu4",
        "1:9.16.0-1ubuntu5",
        "1:9.16.1-0ubuntu1",
        "1:9.16.1-0ubuntu2",
        "1:9.16.1-0ubuntu2.1",
        "1:9.16.1-0ubuntu2.2",
        "1:9.16.1-0ubuntu2.3",
        "1:9.16.1-0ubuntu2.4",
        "1:9.16.1-0ubuntu2.6",
        "1:9.16.1-0ubuntu2.7",
        "1:9.16.1-0ubuntu2.8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.16.15-1ubuntu2"
          },
          {
            "binary_name": "bind9-dnsutils",
            "binary_version": "1:9.16.15-1ubuntu2"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.16.15-1ubuntu2"
          },
          {
            "binary_name": "bind9-libs",
            "binary_version": "1:9.16.15-1ubuntu2"
          },
          {
            "binary_name": "bind9-utils",
            "binary_version": "1:9.16.15-1ubuntu2"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.16.15-1ubuntu2"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.16.15-1ubuntu2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.16.15-1ubuntu2?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.16.15-1ubuntu2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.16.15-1ubuntu1"
      ]
    }
  ],
  "aliases": [],
  "details": "In BIND 9.3.0 -\u003e 9.11.35, 9.12.0 -\u003e 9.16.21, and versions 9.9.3-S1 -\u003e 9.11.35-S1 and 9.16.8-S1 -\u003e 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -\u003e 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing.",
  "id": "UBUNTU-CVE-2021-25219",
  "modified": "2026-04-22T07:39:56Z",
  "published": "2021-10-27T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-25219"
    },
    {
      "type": "REPORT",
      "url": "https://kb.isc.org/docs/cve-2021-25219"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5126-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5126-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-25219"
    }
  ],
  "related": [
    "USN-5126-1",
    "USN-5126-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2021-25219"
  ]
}

CVE-2021-25219 (GCVE-0-2021-25219)

Vulnerability from cvelistv5 – Published: 2021-10-27 21:10 – Updated: 2024-09-16 17:33

Title

Lame cache can be abused to severely degrade resolver performance

Summary

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE

Authoritative-only BIND 9 servers are NOT vulnerable to this flaw. The purpose of a resolver's lame cache is to ensure that if an authoritative server responds to a resolver's query in a specific broken way, subsequent client queries for the same <QNAME, QTYPE> tuple do not trigger further queries to the same server for a configurable amount of time. The lame cache is enabled by setting the "lame-ttl" option in named.conf to a value greater than 0. That option is set to "lame-ttl 600;" in the default configuration, which means the lame cache is enabled by default. A successful attack exploiting this flaw causes a named resolver to spend most of its CPU time on managing and checking the lame cache. This results in client queries being responded to with large delays, and increased likelihood of DNS timeouts on client hosts. Affects BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch.

Assigner

isc

References

10 references

URL	Tags
https://kb.isc.org/v1/docs/cve-2021-25219
https://www.debian.org/security/2021/dsa-4994	vendor-advisory
https://lists.debian.org/debian-lts-announce/2021…	mailing-list
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://www.oracle.com/security-alerts/cpuapr2022.html
https://cert-portal.siemens.com/productcert/pdf/s…
https://security.netapp.com/advisory/ntap-2021111…
https://security.gentoo.org/glsa/202210-25	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
ISC	BIND9	Affected: Open Source Branches 9.3 through 9.11 9.3.0 through versions before 9.11.36 Affected: Open Source Branches 9.12 through 9.16 9.12.0 through versions before 9.16.22 Affected: Supported Preview Branches 9.9-S through 9.11-S 9.9.3-S1 through versions before 9.11.36-S1 Affected: Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.22-S1 Affected: Development Branch 9.17 9.17.0 through versions before 9.17.19

Date Public

2021-10-27 00:00

Credits

ISC would like to thank Kishore Kumar Kothapalli of Infoblox for bringing this vulnerability to our attention.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T19:56:11.060Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://kb.isc.org/v1/docs/cve-2021-25219"
          },
          {
            "name": "DSA-4994",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2021/dsa-4994"
          },
          {
            "name": "[debian-lts-announce] 20211102 [SECURITY] [DLA 2807-1] bind9 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00001.html"
          },
          {
            "name": "FEDORA-2021-58e7b873b7",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTKC4E3HUOLYN5IA4EBL4VAQSWG2ZVTX/"
          },
          {
            "name": "FEDORA-2021-39b33260b8",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGV7SA27CTYLGFJSPUM3V36ZWK7WWDI4/"
          },
          {
            "name": "FEDORA-2021-eb8dab50ba",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EF4NAVRV4H3W4GA3LGGZYUKD3HSJBAVW/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20211118-0002/"
          },
          {
            "name": "GLSA-202210-25",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202210-25"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BIND9",
          "vendor": "ISC",
          "versions": [
            {
              "status": "affected",
              "version": "Open Source Branches 9.3 through 9.11 9.3.0 through versions before 9.11.36"
            },
            {
              "status": "affected",
              "version": "Open Source Branches 9.12 through 9.16 9.12.0 through versions before 9.16.22"
            },
            {
              "status": "affected",
              "version": "Supported Preview Branches 9.9-S through 9.11-S 9.9.3-S1 through versions before 9.11.36-S1"
            },
            {
              "status": "affected",
              "version": "Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.22-S1"
            },
            {
              "status": "affected",
              "version": "Development Branch 9.17 9.17.0 through versions before 9.17.19"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ISC would like to thank Kishore Kumar Kothapalli of Infoblox for bringing this vulnerability to our attention."
        }
      ],
      "datePublic": "2021-10-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "In BIND 9.3.0 -\u003e 9.11.35, 9.12.0 -\u003e 9.16.21, and versions 9.9.3-S1 -\u003e 9.11.35-S1 and 9.16.8-S1 -\u003e 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -\u003e 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "We are not aware of any active exploits."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Authoritative-only BIND 9 servers are NOT vulnerable to this flaw. The purpose of a resolver\u0027s lame cache is to ensure that if an authoritative server responds to a resolver\u0027s query in a specific broken way, subsequent client queries for the same \u003cQNAME, QTYPE\u003e tuple do not trigger further queries to the same server for a configurable amount of time. The lame cache is enabled by setting the \"lame-ttl\" option in named.conf to a value greater than 0. That option is set to \"lame-ttl 600;\" in the default configuration, which means the lame cache is enabled by default. A successful attack exploiting this flaw causes a named resolver to spend most of its CPU time on managing and checking the lame cache. This results in client queries being responded to with large delays, and increased likelihood of DNS timeouts on client hosts. Affects BIND 9.3.0 -\u003e 9.11.35, 9.12.0 -\u003e 9.16.21, and versions 9.9.3-S1 -\u003e 9.11.35-S1 and 9.16.8-S1 -\u003e 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -\u003e 9.17.18 of the BIND 9.17 development branch.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-31T00:00:00.000Z",
        "orgId": "404fd4d2-a609-4245-b543-2c944a302a22",
        "shortName": "isc"
      },
      "references": [
        {
          "url": "https://kb.isc.org/v1/docs/cve-2021-25219"
        },
        {
          "name": "DSA-4994",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2021/dsa-4994"
        },
        {
          "name": "[debian-lts-announce] 20211102 [SECURITY] [DLA 2807-1] bind9 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00001.html"
        },
        {
          "name": "FEDORA-2021-58e7b873b7",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTKC4E3HUOLYN5IA4EBL4VAQSWG2ZVTX/"
        },
        {
          "name": "FEDORA-2021-39b33260b8",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGV7SA27CTYLGFJSPUM3V36ZWK7WWDI4/"
        },
        {
          "name": "FEDORA-2021-eb8dab50ba",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EF4NAVRV4H3W4GA3LGGZYUKD3HSJBAVW/"
        },
        {
          "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20211118-0002/"
        },
        {
          "name": "GLSA-202210-25",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202210-25"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to the patched release most closely related to your current version of BIND: BIND 9.11.36, BIND 9.16.22, BIND 9.17.19, or for BIND Supported Preview Edition (a special feature preview branch of BIND provided to eligible ISC support customers): BIND 9.11.36-S1, BIND 9.16.22-S1."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Lame cache can be abused to severely degrade resolver performance",
      "workarounds": [
        {
          "lang": "en",
          "value": "Setting \"lame-ttl 0;\" disables the lame cache and prevents the performance issue. Our research and testing indicate that in the current Internet there is almost no downside to disabling the lame cache."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404fd4d2-a609-4245-b543-2c944a302a22",
    "assignerShortName": "isc",
    "cveId": "CVE-2021-25219",
    "datePublished": "2021-10-27T21:10:10.088Z",
    "dateReserved": "2021-01-15T00:00:00.000Z",
    "dateUpdated": "2024-09-16T17:33:38.865Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

usn-5126-1

Vulnerability from osv_ubuntu

Published

2021-10-28 10:52

Modified

2026-04-22 07:37

Summary

bind9 vulnerability

Details

Kishore Kumar Kothapalli discovered that Bind incorrectly handled the lame cache when processing responses. A remote attacker could possibly use this issue to cause Bind to consume resources, resulting in a denial of service.

References

URL

Type

	https://ubuntu.com/security/notices/USN-5126-1	ADVISORY
	https://ubuntu.com/security/CVE-2021-25219	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2021-25219",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libbind9-160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libdns-export1100",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libdns1100",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libirs-export160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libirs160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libisc-export169",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libisc169",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libisccc-export160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libisccc160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libisccfg-export160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "libisccfg160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          },
          {
            "binary_name": "liblwres160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.16"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.11.3+dfsg-1ubuntu1.16?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.11.3+dfsg-1ubuntu1.16"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.10.3.dfsg.P4-12.6ubuntu1",
        "1:9.11.2.P1-1ubuntu2",
        "1:9.11.2.P1-1ubuntu3",
        "1:9.11.2.P1-1ubuntu4",
        "1:9.11.2.P1-1ubuntu5",
        "1:9.11.3+dfsg-1ubuntu1",
        "1:9.11.3+dfsg-1ubuntu1.1",
        "1:9.11.3+dfsg-1ubuntu1.2",
        "1:9.11.3+dfsg-1ubuntu1.3",
        "1:9.11.3+dfsg-1ubuntu1.5",
        "1:9.11.3+dfsg-1ubuntu1.7",
        "1:9.11.3+dfsg-1ubuntu1.8",
        "1:9.11.3+dfsg-1ubuntu1.9",
        "1:9.11.3+dfsg-1ubuntu1.10",
        "1:9.11.3+dfsg-1ubuntu1.11",
        "1:9.11.3+dfsg-1ubuntu1.12",
        "1:9.11.3+dfsg-1ubuntu1.13",
        "1:9.11.3+dfsg-1ubuntu1.14",
        "1:9.11.3+dfsg-1ubuntu1.15"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2021-25219",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.16.1-0ubuntu2.9"
          },
          {
            "binary_name": "bind9-dnsutils",
            "binary_version": "1:9.16.1-0ubuntu2.9"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.16.1-0ubuntu2.9"
          },
          {
            "binary_name": "bind9-libs",
            "binary_version": "1:9.16.1-0ubuntu2.9"
          },
          {
            "binary_name": "bind9-utils",
            "binary_version": "1:9.16.1-0ubuntu2.9"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.16.1-0ubuntu2.9"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.16.1-0ubuntu2.9"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.16.1-0ubuntu2.9?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.16.1-0ubuntu2.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.11.5.P4+dfsg-5.1ubuntu2",
        "1:9.11.5.P4+dfsg-5.1ubuntu3",
        "1:9.11.5.P4+dfsg-5.1ubuntu4",
        "1:9.11.5.P4+dfsg-5.1ubuntu5",
        "1:9.11.14+dfsg-1ubuntu1",
        "1:9.11.14+dfsg-3ubuntu1",
        "1:9.16.0-1ubuntu3",
        "1:9.16.0-1ubuntu4",
        "1:9.16.0-1ubuntu5",
        "1:9.16.1-0ubuntu1",
        "1:9.16.1-0ubuntu2",
        "1:9.16.1-0ubuntu2.1",
        "1:9.16.1-0ubuntu2.2",
        "1:9.16.1-0ubuntu2.3",
        "1:9.16.1-0ubuntu2.4",
        "1:9.16.1-0ubuntu2.6",
        "1:9.16.1-0ubuntu2.7",
        "1:9.16.1-0ubuntu2.8"
      ]
    }
  ],
  "aliases": [],
  "details": "Kishore Kumar Kothapalli discovered that Bind incorrectly handled the lame\ncache when processing responses. A remote attacker could possibly use this\nissue to cause Bind to consume resources, resulting in a denial of service.\n",
  "id": "USN-5126-1",
  "modified": "2026-04-22T07:37:00Z",
  "published": "2021-10-28T10:52:18Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5126-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-25219"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "bind9 vulnerability",
  "upstream": [
    "UBUNTU-CVE-2021-25219"
  ]
}

usn-5126-2

Vulnerability from osv_ubuntu

Published

2021-10-28 18:25

Modified

2026-06-29 10:52

Summary

bind9 vulnerability

Details

USN-5126-1 fixed a vulnerability in Bind. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

References

URL

Type

	https://ubuntu.com/security/notices/USN-5126-2	ADVISORY
	https://ubuntu.com/security/CVE-2021-25219	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2021-25219",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "host",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "libbind9-90",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "libdns100",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "libisc95",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "libisccc90",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "libisccfg90",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "liblwres90",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          },
          {
            "binary_name": "lwresd",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.9.5.dfsg-3ubuntu0.19+esm5?arch=source\u0026distro=trusty/esm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.9.5.dfsg-3ubuntu0.19+esm5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.9.3.dfsg.P2-4ubuntu1",
        "1:9.9.3.dfsg.P2-4ubuntu2",
        "1:9.9.3.dfsg.P2-4ubuntu3",
        "1:9.9.5.dfsg-2",
        "1:9.9.5.dfsg-3",
        "1:9.9.5.dfsg-3ubuntu0.1",
        "1:9.9.5.dfsg-3ubuntu0.2",
        "1:9.9.5.dfsg-3ubuntu0.3",
        "1:9.9.5.dfsg-3ubuntu0.4",
        "1:9.9.5.dfsg-3ubuntu0.5",
        "1:9.9.5.dfsg-3ubuntu0.6",
        "1:9.9.5.dfsg-3ubuntu0.7",
        "1:9.9.5.dfsg-3ubuntu0.8",
        "1:9.9.5.dfsg-3ubuntu0.9",
        "1:9.9.5.dfsg-3ubuntu0.10",
        "1:9.9.5.dfsg-3ubuntu0.11",
        "1:9.9.5.dfsg-3ubuntu0.12",
        "1:9.9.5.dfsg-3ubuntu0.13",
        "1:9.9.5.dfsg-3ubuntu0.14",
        "1:9.9.5.dfsg-3ubuntu0.15",
        "1:9.9.5.dfsg-3ubuntu0.16",
        "1:9.9.5.dfsg-3ubuntu0.17",
        "1:9.9.5.dfsg-3ubuntu0.18",
        "1:9.9.5.dfsg-3ubuntu0.19",
        "1:9.9.5.dfsg-3ubuntu0.19+esm1",
        "1:9.9.5.dfsg-3ubuntu0.19+esm2",
        "1:9.9.5.dfsg-3ubuntu0.19+esm3",
        "1:9.9.5.dfsg-3ubuntu0.19+esm4"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2021-25219",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "host",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libbind9-140",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libdns-export162",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libdns162",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libirs-export141",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libirs141",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libisc-export160",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libisc160",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libisccc-export140",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libisccc140",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libisccfg-export140",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "libisccfg140",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "liblwres141",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          },
          {
            "binary_name": "lwresd",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.10.3.dfsg.P4-8ubuntu1.19+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.9.5.dfsg-11ubuntu1",
        "1:9.9.5.dfsg-12",
        "1:9.9.5.dfsg-12.1",
        "1:9.9.5.dfsg-12.1ubuntu1",
        "1:9.10.3.dfsg.P2-4",
        "1:9.10.3.dfsg.P2-5",
        "1:9.10.3.dfsg.P4-3",
        "1:9.10.3.dfsg.P4-4",
        "1:9.10.3.dfsg.P4-5",
        "1:9.10.3.dfsg.P4-8",
        "1:9.10.3.dfsg.P4-8ubuntu1",
        "1:9.10.3.dfsg.P4-8ubuntu1.1",
        "1:9.10.3.dfsg.P4-8ubuntu1.2",
        "1:9.10.3.dfsg.P4-8ubuntu1.3",
        "1:9.10.3.dfsg.P4-8ubuntu1.4",
        "1:9.10.3.dfsg.P4-8ubuntu1.5",
        "1:9.10.3.dfsg.P4-8ubuntu1.6",
        "1:9.10.3.dfsg.P4-8ubuntu1.7",
        "1:9.10.3.dfsg.P4-8ubuntu1.8",
        "1:9.10.3.dfsg.P4-8ubuntu1.9",
        "1:9.10.3.dfsg.P4-8ubuntu1.10",
        "1:9.10.3.dfsg.P4-8ubuntu1.11",
        "1:9.10.3.dfsg.P4-8ubuntu1.12",
        "1:9.10.3.dfsg.P4-8ubuntu1.14",
        "1:9.10.3.dfsg.P4-8ubuntu1.15",
        "1:9.10.3.dfsg.P4-8ubuntu1.16",
        "1:9.10.3.dfsg.P4-8ubuntu1.17",
        "1:9.10.3.dfsg.P4-8ubuntu1.18",
        "1:9.10.3.dfsg.P4-8ubuntu1.19"
      ]
    }
  ],
  "aliases": [],
  "details": "USN-5126-1 fixed a vulnerability in Bind. This update provides\nthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n Kishore Kumar Kothapalli discovered that Bind incorrectly handled the lame\n cache when processing responses. A remote attacker could possibly use this\n issue to cause Bind to consume resources, resulting in a denial of service.\n",
  "id": "USN-5126-2",
  "modified": "2026-06-29T10:52:52Z",
  "published": "2021-10-28T18:25:41Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5126-2"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-25219"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "bind9 vulnerability",
  "upstream": [
    "UBUNTU-CVE-2021-25219"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

ubuntu-cve-2021-25219

Vulnerability from osv_ubuntu

CVE-2021-25219 (GCVE-0-2021-25219)

usn-5126-1

Vulnerability from osv_ubuntu

usn-5126-2

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature