Medium severity5.3NVD Advisory· Published Oct 27, 2021· Updated Jun 17, 2026

CVE-2021-25219

Description

In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Isc/Bind24 versions
cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*+ 23 more
- cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*range: >=9.3.0,<9.11.36
- cpe:2.3:a:isc:bind:9.10.5:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.10.7:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.12:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.21:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.27:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.29:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.35:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.5:s3:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.5:s5:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.5:s6:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.8:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.16.11:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.16.13:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.16.21:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.16.8:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.9.12:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.9.13:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.9.3:s1:*:*:supported_preview:*:*:*
- (no CPE)range: 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, 9.9.3-S1 -> 9.11.35-S1, 9.16.8-S1 -> 9.16.21-S1, 9.17.0 -> 9.17.18
- (no CPE)range: Open Source Branches 9.3 through 9.11 9.3.0 through versions before 9.11.36
NetApp/Cloud Backup
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
Oracle Corporation/HTTP Server2 versions
cpe:2.3:a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*
Oracle Corporation/Zfs Storage Appliance Kit
cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*
Siemens Foundation/Sinec Infrastructure Network Services
cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*
Range: <1.0.1.1
Debian/linux3 versions
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Fedoraproject/Fedora3 versions
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
NetApp/H300e Firmware
cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*
NetApp/H300s Firmware
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
NetApp/H410c Firmware
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
NetApp/H410s Firmware
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
NetApp/H500e Firmware
cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*
NetApp/H500s Firmware
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
NetApp/H700e Firmware
cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*
NetApp/H700s Firmware
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
Isc/BIND 9.17 development branchllm-create
Range: 9.17.0 -> 9.17.18
Isc/BIND 9 Supported Preview Editionllm-fuzzy
Range: 9.9.3-S1 -> 9.11.35-S1, 9.16.8-S1 -> 9.16.21-S1
osv-coords48 versions
pkg:apk/chainguard/bind pkg:apk/chainguard/bind-dev pkg:apk/chainguard/bind-dnssec-root pkg:apk/chainguard/bind-dnssec-tools pkg:apk/chainguard/bind-doc pkg:apk/chainguard/bind-libs pkg:apk/chainguard/bind-plugins pkg:apk/chainguard/bind-tools pkg:apk/wolfi/bind pkg:apk/wolfi/bind-dev pkg:apk/wolfi/bind-dnssec-root pkg:apk/wolfi/bind-dnssec-tools pkg:apk/wolfi/bind-doc pkg:apk/wolfi/bind-libs pkg:apk/wolfi/bind-plugins pkg:apk/wolfi/bind-tools pkg:rpm/almalinux/bind pkg:rpm/almalinux/bind-chroot pkg:rpm/almalinux/bind-devel pkg:rpm/almalinux/bind-export-devel pkg:rpm/almalinux/bind-export-libs pkg:rpm/almalinux/bind-libs pkg:rpm/almalinux/bind-libs-lite pkg:rpm/almalinux/bind-license pkg:rpm/almalinux/bind-lite-devel pkg:rpm/almalinux/bind-pkcs11 pkg:rpm/almalinux/bind-pkcs11-devel pkg:rpm/almalinux/bind-pkcs11-libs pkg:rpm/almalinux/bind-pkcs11-utils pkg:rpm/almalinux/bind-sdb pkg:rpm/almalinux/bind-sdb-chroot pkg:rpm/almalinux/bind-utils pkg:rpm/almalinux/python3-bind pkg:rpm/opensuse/bind&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/bind&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/bind&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/bind&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/htmldoc&distro=openSUSE%20Leap%2015.3 pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP2 pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP3 pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP4 pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/htmldoc&distro=SUSE%20Package%20Hub%2015%20SP3
< 0+ 47 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 32:9.11.36-3.el8
- (no CPE)range: < 32:9.11.36-3.el8
- (no CPE)range: < 32:9.11.36-3.el8
- (no CPE)range: < 32:9.11.36-3.el8
- (no CPE)range: < 32:9.11.36-3.el8
- (no CPE)range: < 32:9.11.36-3.el8
- (no CPE)range: < 32:9.11.36-3.el8
- (no CPE)range: < 32:9.11.36-3.el8
- (no CPE)range: < 32:9.11.36-3.el8
- (no CPE)range: < 32:9.11.36-3.el8
- (no CPE)range: < 32:9.11.36-3.el8
- (no CPE)range: < 32:9.11.36-3.el8
- (no CPE)range: < 32:9.11.36-3.el8
- (no CPE)range: < 32:9.11.36-3.el8
- (no CPE)range: < 32:9.11.36-3.el8
- (no CPE)range: < 32:9.11.36-3.el8
- (no CPE)range: < 32:9.11.36-3.el8
- (no CPE)range: < 9.16.6-lp152.14.25.1
- (no CPE)range: < 9.16.6-12.57.1
- (no CPE)range: < 9.16.31-150400.5.6.1
- (no CPE)range: < 9.16.20-3.1
- (no CPE)range: < 1.9.12-bp153.2.15.1
- (no CPE)range: < 9.16.6-12.57.1
- (no CPE)range: < 9.16.6-150300.22.13.1
- (no CPE)range: < 9.16.31-150400.5.6.1
- (no CPE)range: < 9.16.6-12.57.1
- (no CPE)range: < 9.16.6-150300.22.13.1
- (no CPE)range: < 9.16.31-150400.5.6.1
- (no CPE)range: < 9.11.22-3.37.1
- (no CPE)range: < 9.11.22-3.37.1
- (no CPE)range: < 9.11.22-3.37.1
- (no CPE)range: < 1.9.12-bp153.2.15.1

Patches

Vulnerability mechanics

References

cert-portal.siemens.com/productcert/pdf/ssa-389290.pdfnvdPatchThird Party Advisory
kb.isc.org/v1/docs/cve-2021-25219nvdVendor Advisory
lists.debian.org/debian-lts-announce/2021/11/msg00001.htmlnvdMailing ListThird Party Advisory
security.gentoo.org/glsa/202210-25nvdThird Party Advisory
security.netapp.com/advisory/ntap-20211118-0002/nvdThird Party Advisory
www.debian.org/security/2021/dsa-4994nvdThird Party Advisory
www.oracle.com/security-alerts/cpuapr2022.htmlnvdThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EF4NAVRV4H3W4GA3LGGZYUKD3HSJBAVW/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGV7SA27CTYLGFJSPUM3V36ZWK7WWDI4/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTKC4E3HUOLYN5IA4EBL4VAQSWG2ZVTX/nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.008
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000