5.3

CVE-2021-25219: debian debian_linux

CVSS: 5.3v3.1MediumModified
AliasesALPINE-CVE-2021-25219MGASA-2021-0560SUSE-SU-2021:3657-1
Published 27-10-2021Last modified 16-09-2024
Open JSON

Vulnerability summary

CVE-2021-25219 is a medium (CVSS 5.3) vulnerability in debian debian_linux. EPSS estimates a 10.58% chance of exploitation in the next 30 days, higher than 95.7% of scored vulnerabilities.

Overall risk
23/100
0100
Low · default modelHow is this calculated?
CVSS score
5.3/10
010
Medium · v3.1 (CVE.org)
EPSS score
10.58%
0%100%
Medium · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 3
DLA-2807-1SUSE-SU-2022:2713-1CGA-257W-5V7C-WMJWCGA-JCVG-FGV3-8859

Timeline

  1. 27-10-2021
    PublishedVulnerability first disclosed.
  2. 16-09-2024
    Last modifiedVulnerability information updated.

Description

In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing.

CVSS metrics

9 scores · 8 sources · 2 versions

EPSS trend

Probability

10.58%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 10.58% on 18-09-2026

18-09-202618-10-2026
EPSS score
10.58%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat27 products
  • bind< 32:9.11.36-3.el8
  • bind-chroot< 32:9.11.36-3.el8
  • bind-debuginfo< 32:9.11.36-3.el8
  • bind-debugsource< 32:9.11.36-3.el8
  • bind-devel< 32:9.11.36-3.el8
Netapp9 products
Suse8 products
  • bind&distro=SUSE Linux Enterprise Module for Basesystem 15 SP2< 9.16.6-12.57.1
  • bind&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3< 9.16.6-150300.22.13.1
  • bind&distro=SUSE Linux Enterprise Module for Server Applications 15 SP2< 9.16.6-12.57.1
  • bind&distro=SUSE Linux Enterprise Module for Server Applications 15 SP3< 9.16.6-150300.22.13.1
  • bind&distro=SUSE Linux Enterprise Server 12 SP5< 9.11.22-3.37.1
Opensuse4 products
  • bind&distro=openSUSE Leap 15.2< 9.16.6-lp152.14.25.1
  • bind&distro=openSUSE Leap 15.3< 9.16.6-12.57.1 | < 9.16.6-150300.22.13.1
  • bind&distro=openSUSE Tumbleweed< 9.16.20-3.1
  • htmldoc&distro=openSUSE Leap 15.3< 1.9.12-bp153.2.15.1
Debian2 products
  • bind9< 1:9.17.19-1 | < 1:9.11.5.P4+dfsg-5.1+deb10u6 | < 1:9.16.22-1~deb11u1
  • debian_linuxEOL9.0 | 10.0 | 11.0
Isc2 products
  • bind≥ 9.3.0, < 9.11.36 | ≥ 9.12.0, < 9.16.22 | ≥ 9.17.0, < 9.17.19 | 9.9.3:s1 | 9.9.12:s1 | 9.9.13:s1 | 9.10.5:s1 | 9.10.7:s1 | 9.11.3:s1 | 9.11.5:s3 | 9.11.5:s5 | 9.11.5:s6 | 9.11.6:s1 | 9.11.7:s1 | 9.11.8:s1 | 9.11.12:s1 | 9.11.21:s1 | 9.11.27:s1 | 9.11.29:s1 | 9.11.35:s1 | 9.16.8:s1 | 9.16.11:s1 | 9.16.13:s1 | 9.16.21:s1
  • bind9Open Source Branches 9.3 through 9.11 9.3.0 through versions before 9.11.36 | Open Source Branches 9.12 through 9.16 9.12.0 through versions before 9.16.22 | Supported Preview Branches 9.9-S through 9.11-S 9.9.3-S1 through versions before 9.11.36-S1 | Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.22-S1 | Development Branch 9.17 9.17.0 through versions before 9.17.19
Oracle2 products
Alpine1 product
  • bind≥ 9.3.0, < 9.16.27-r0 | ≥ 9.3.0, < 9.16.25-r0 | ≥ 9.3.0, < 9.16.22-r0
Chainguard1 product
  • bindAll versions (No fix recorded)
Fedoraproject1 product
Mageia1 product
  • bind< 9.11.36-1.1.mga8
Siemens1 product
Ubuntu1 product
  • bind9< 1:9.16.15-1ubuntu2 | < 1:9.11.3+dfsg-1ubuntu1.16 | < 1:9.16.1-0ubuntu2.9 | < 1:9.9.5.dfsg-3ubuntu0.19+esm5 | < 1:9.10.3.dfsg.P4-8ubuntu1.19+esm1
Wolfi1 product
  • bindAll versions (No fix recorded)

14 vendors · 61 products

References

39 links
Show all 39 references