UpHeron
All vulnerabilities

Servers and applications

CVE-2021-25214

In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a malformed IXFR triggering the flaw described above, the named process will terminate due to a failed…

Severity
Medium 6.5
Published
29 Apr 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.11.31, 9.16.15, 9.17.12
Sources
NVD

Affected software

SoftwareAffected versions
BIND 9Servers and applications · cpe:a:isc:bind
  • From 9.17.0 before 9.17.12
  • Version 9.16.13-s1
  • Version 9.16.11-s1
  • Version 9.16.8-s1
All 23 release lines
  • From 9.8.5 up to 9.8.8
  • From 9.9.3 before 9.11.31
  • Version 9.9.3-s1
  • Version 9.9.12-s1
  • Version 9.9.13-s1
  • Version 9.10.5-s1
  • Version 9.10.7-s1
  • Version 9.11.3-s1
  • Version 9.11.5-s3
  • Version 9.11.5-s5
  • Version 9.11.5-s6
  • Version 9.11.6-s1
  • Version 9.11.7-s1
  • Version 9.11.8-s1
  • Version 9.11.12-s1
  • Version 9.11.21-s1
  • Version 9.11.27-s1
  • Version 9.11.29-s1
  • From 9.12.0 before 9.16.15
  • Version 9.16.8-s1
  • Version 9.16.11-s1
  • Version 9.16.13-s1
  • From 9.17.0 before 9.17.12

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-25214
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-25214