Vulnerability in BIND Package (CVE-2021-25220)
Summary
CVE-2021-25220: BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported... Affects bind across 3 version ranges.
>= 2fe4344de48d6061bef5a4000066a99a7c1296a6, < 796133c72d41e724995121c1f048db1b4529c732
< 9.16.27-r0
>= 1477c19dd9a347ee19a42dac227f299a4680506f, < 796133c72d41e724995121c1f048db1b4529c732
Fixed in 9.16.27-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
BIND is a widely used open-source DNS server software package. It provides the functionality to resolve domain names to IP addresses and vice versa. The package is commonly used in various operating systems and distributions. However, a vulnerability, identified as CVE-2021-25220, has been discovered in BIND versions 9.11.0 to 9.11.36, 9.12.0 to 9.16.26, and 9.17.0 to 9.18.0. This vulnerability can lead to the cache being poisoned with incorrect records, resulting in queries being made to the wrong servers and potentially returning false information to clients.
Vulnerability Detail
The vulnerability (CVE-2021-25220) in BIND allows the cache to be poisoned with incorrect records. This can lead to queries being made to the wrong servers and the possibility of false information being returned to clients. The vulnerability affects versions 9.11.0 to 9.11.36, 9.12.0 to 9.16.26, and 9.17.0 to 9.18.0 of BIND. Earlier versions, including Supported Preview Editions, are also believed to be affected. The impact of this vulnerability can be significant, as it can lead to DNS resolution errors and potential security risks.
How To Fix
Minimum fixed version
9.16.27-r0
This is the first release that contains the fix.
sudo apk add --upgrade bindTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended solution is to upgrade BIND to the fixed version.
Conclusion
The vulnerability (CVE-2021-25220) in BIND can lead to the cache being poisoned with incorrect records, potentially causing DNS resolution errors and security risks. It is crucial to upgrade BIND to version 9.16.27-r0 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for bind →
FAQ
BIND is an open-source DNS server software package used for resolving domain names to IP addresses and vice versa.
The vulnerability affects BIND versions 9.11.0 to 9.11.36, 9.12.0 to 9.16.26, and 9.17.0 to 9.18.0. Earlier versions, including Supported Preview Editions, are also believed to be affected.
The vulnerability can lead to the cache being poisoned with incorrect records, resulting in queries being made to the wrong servers and potentially returning false information to clients. This can cause DNS resolution errors and pose security risks.
To fix the vulnerability, it is recommended to upgrade BIND to version 9.16.27-r0 or later. This version includes the necessary patches to address the vulnerability.
There is no specific workaround mentioned for this vulnerability. The recommended solution is to upgrade BIND to the fixed version.
Related vulnerabilities
Recent vulnerabilities recorded for bind.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
