CVE-2021-25218

Original description

In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a vulnerable version of named receives a query under the circumstances described above, the named process will terminate due to a failed assertion check. The vulnerability affects only BIND 9 releases 9.16.19, 9.17.16, and release 9.16.19-S1 of the BIND Supported Preview Edition.

Affected software

• BIND 9 = 9.17.16= 9.16.19 exact match

Details

Published

2021-08-18

Last modified

2026-06-17

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-617

References

• cve.org/CVE-2021-25218
• nvd.nist.gov/vuln/detail/CVE-2021-25218
• www.openwall.com/lists/oss-security/2021/08/18/3
• www.openwall.com/lists/oss-security/2021/08/20/2
• kb.isc.org/v1/docs/cve-2021-25218
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z...
• security.netapp.com/advisory/ntap-20210909-0002/