UpHeron
All vulnerabilities

Servers and applications

CVE-2021-25216

In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.1 of the BIND 9.17 development branch, BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings…

Severity
Critical 9.8
Published
29 Apr 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.11.31, 9.16.15, 9.17.12
Sources
NVD

Affected software

SoftwareAffected versions
BIND 9Servers and applications · cpe:a:isc:bind
  • From 9.17.0 before 9.17.12
  • Version 9.16.13-s1
  • Version 9.16.11-s1
  • Version 9.16.8-s1
All 22 release lines
  • From 9.0.0 before 9.11.31
  • Version 9.9.3-s1
  • Version 9.9.12-s1
  • Version 9.9.13-s1
  • Version 9.10.5-s1
  • Version 9.10.7-s1
  • Version 9.11.3-s1
  • Version 9.11.5-s3
  • Version 9.11.5-s5
  • Version 9.11.5-s6
  • Version 9.11.6-s1
  • Version 9.11.7-s1
  • Version 9.11.8-s1
  • Version 9.11.12-s1
  • Version 9.11.21-s1
  • Version 9.11.27-s1
  • Version 9.11.29-s1
  • From 9.12.0 before 9.16.15
  • Version 9.16.8-s1
  • Version 9.16.11-s1
  • Version 9.16.13-s1
  • From 9.17.0 before 9.17.12

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-25216
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-25216