{"schemaVersion":3,"id":"USN-5332-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"bind9 vulnerabilities\n\nXiang Li, Baojun Liu, Chaoyi Lu, and Changgen Zou discovered that Bind\nincorrectly handled certain bogus NS records when using forwarders. A\nremote attacker could possibly use this issue to manipulate cache results.\n(CVE-2021-25220)\n\nIt was discovered that Bind incorrectly handled certain crafted TCP\nstreams. A remote attacker could possibly use this issue to cause Bind to\nconsume resources, leading to a denial of service. This issue only affected\nUbuntu 21.10. (CVE-2022-0396)","dates":{"published":"2022-03-17T11:19:29.000Z","modified":"2026-04-22T10:22:06.898Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"bind9","name":"bind9","label":"bind9","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/bind9","purlType":"deb","versions":[{"text":"< 1:9.11.3+dfsg-1ubuntu1.17","noFixRecorded":false,"fixedIn":null},{"text":"< 1:9.16.1-0ubuntu2.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:9.11.3+dfsg-1ubuntu1.17 | < 1:9.16.1-0ubuntu2.10","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-5332-1","label":"ubuntu.com/security/notices/USN-5332-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-25220","label":"ubuntu.com/security/CVE-2021-25220","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-0396","label":"ubuntu.com/security/CVE-2022-0396","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2021-25220","CVE-2022-0396"],"downstream":[],"duplicates":[],"related":["CVE-2021-25220","CVE-2022-0396"]},"timeline":[{"kind":"published","date":"2022-03-17T11:19:29.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-22T10:22:06.898Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T18:36:15.542Z","stale":false,"partial":false}}