CVE-2021-25215: debian debian_linux Reachable Assertion
CVSS: 7.5v3.1HighModified
AliasesALPINE-CVE-2021-25215RHSA-2021:1468RHSA-2021:1469RHSA-2021:1475RHSA-2021:1476RHSA-2021:1477RHSA-2021:1478RHSA-2021:1479RHSA-2021:1989RHSA-2021:2024RHSA-2021:2028UBUNTU-CVE-2021-25215DEBIAN-CVE-2021-25215CGA-4gcj-qhfx-q66mCGA-mgjq-5xcx-f67r
Published 29-04-2021Last modified 16-09-2024
Vulnerability summary
CVE-2021-25215 is a high (CVSS 7.5) Reachable Assertion vulnerability in debian debian_linux. EPSS estimates a 11.39% chance of exploitation in the next 30 days, higher than 95.9% of scored vulnerabilities.
CVSS score
7.5/10
010
High · v3.1 (CVE.org)EPSS score
11.39%
0%100%
Medium · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 13 · Related 12Timeline
- 29-04-2021PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a query for a record triggering the flaw described above, the named process will terminate due to a failed assertion check. The vulnerability affects all currently maintained BIND 9 branches (9.11, 9.11-S, 9.16, 9.16-S, 9.17) as well as all other versions of BIND 9.
CVSS metrics
9 scores · 8 sources · 2 versionsHigh 7.5Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HSourcesAll 8 agree
- OSV · AlpineEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · Red hatEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · WolfiEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · ChainguardEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Medium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:PSourcesSingle source
EPSS trend
Probability
11.39%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 11.39% on 18-09-2026
18-09-202618-10-2026
EPSS score11.39%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat27 products
- bind< 32:9.8.2-0.68.rc1.el6_10.11 | < 32:9.11.4-26.P2.el7_9.5 | < 32:9.9.4-50.el7_3.6 | < 32:9.9.4-29.el7_2.11 | < 32:9.11.4-9.P2.el7_7.5 | < 32:9.9.4-74.el7_6.7 | < 32:9.9.4-51.el7_4.6 | < 32:9.11.26-4.el8_4 | < 32:9.11.13-6.el8_2.3 | < 32:9.11.4-26.P2.el8_1.5
- bind-chroot< 32:9.8.2-0.68.rc1.el6_10.11 | < 32:9.11.4-26.P2.el7_9.5 | < 32:9.9.4-50.el7_3.6 | < 32:9.9.4-29.el7_2.11 | < 32:9.11.4-9.P2.el7_7.5 | < 32:9.9.4-74.el7_6.7 | < 32:9.9.4-51.el7_4.6 | < 32:9.11.26-4.el8_4 | < 32:9.11.13-6.el8_2.3 | < 32:9.11.4-26.P2.el8_1.5
- bind-debuginfo< 32:9.8.2-0.68.rc1.el6_10.11 | < 32:9.11.4-26.P2.el7_9.5 | < 32:9.9.4-50.el7_3.6 | < 32:9.9.4-29.el7_2.11 | < 32:9.11.4-9.P2.el7_7.5 | < 32:9.9.4-74.el7_6.7 | < 32:9.9.4-51.el7_4.6 | < 32:9.11.26-4.el8_4 | < 32:9.11.13-6.el8_2.3 | < 32:9.11.4-26.P2.el8_1.5
- bind-debugsource< 32:9.11.26-4.el8_4 | < 32:9.11.13-6.el8_2.3 | < 32:9.11.4-26.P2.el8_1.5
- bind-devel< 32:9.8.2-0.68.rc1.el6_10.11 | < 32:9.11.4-26.P2.el7_9.5 | < 32:9.9.4-50.el7_3.6 | < 32:9.9.4-29.el7_2.11 | < 32:9.11.4-9.P2.el7_7.5 | < 32:9.9.4-74.el7_6.7 | < 32:9.9.4-51.el7_4.6 | < 32:9.11.26-4.el8_4 | < 32:9.11.13-6.el8_2.3 | < 32:9.11.4-26.P2.el8_1.5
Netapp11 products
Debian2 products
- bind9< 1:9.16.15-1
- debian_linuxEOL9.0 | 10.0
Isc2 products
- bind≥ 9.0.0, < 9.11.31 | ≥ 9.12.0, < 9.16.15 | ≥ 9.17.0, < 9.17.12 | 9.9.3:s1 | 9.9.12:s1 | 9.9.13:s1 | 9.10.5:s1 | 9.10.7:s1 | 9.11.3:s1 | 9.11.5:s3 | 9.11.5:s5 | 9.11.5:s6 | 9.11.6:s1 | 9.11.7:s1 | 9.11.8:s1 | 9.11.12:s1 | 9.11.21:s1 | 9.11.27:s1 | 9.11.29:s1 | 9.16.8:s1 | 9.16.11:s1 | 9.16.13:s1
- bind9Open Source Branches 9.0 through 9.11 9.0.0 through versions before 9.11.30 | Open Source Branches 9.12 through 9.16 9.12.0 through versions before 9.16.14 | Supported Preview Branches 9.9-S through 9.11-S 9.9.3-S1 through versions before 9.11.30-S1 | Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.14-S1 | Development Branch 9.17 9.17.0 through versiosn before 9.17.12
Alpine1 product
- bind≥ 9.0.0, < 9.16.15-r0
Chainguard1 product
- bindAll versions (No fix recorded)
Fedoraproject1 product
- fedoraEOL33 | 34
Oracle1 product
- tekelec_platform_distribution≥ 7.4.0, ≤ 7.7.1
Siemens1 product
Ubuntu1 product
- bind9< 1:9.9.5.dfsg-3ubuntu0.19+esm13 | < 1:9.10.3.dfsg.P4-8ubuntu1.19 | < 1:9.11.3+dfsg-1ubuntu1.15 | < 1:9.16.1-0ubuntu2.8
Wolfi1 product
- bindAll versions (No fix recorded)
11 vendors · 49 products
References
43 links- www.openwall.com/lists/oss-security/2021/04/29/1Mailing ListX Refsource MLISTAdvisoryThird Party Advisory
- www.openwall.com/lists/oss-security/2021/04/29/2Mailing ListX Refsource MLISTAdvisoryThird Party Advisory
- www.openwall.com/lists/oss-security/2021/04/29/3Mailing ListX Refsource MLISTAdvisoryThird Party Advisory
- www.openwall.com/lists/oss-security/2021/04/29/4Mailing ListX Refsource MLISTAdvisoryThird Party Advisory
- lists.debian.org/debian-lts-announce/2021/05/msg00001.htmlMailing ListX Refsource MLISTAdvisoryThird Party Advisory
Show all 43 references
- cert-portal.siemens.com/productcert/pdf/ssa-389290.pdfX Refsource CONFIRMFIXPatchThird Party Advisory
