CVE-2021-25220

—

CVSS 3.1

6.8 medium

EPSS

3%p88

Published

Mar 23, 2022 (Mar 23, 2022)

Modified

Jun 17, 2026

Description

BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.

Vendors: isc fedoraproject netapp siemens juniper
Products: bind, fedora, h300s firmware, h500s firmware, h700s firmware, h300e firmware, h500e firmware, h700e firmware, h410s firmware, h410c firmware, sinec ins, junos
Weakness: CWE-444
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (3.4%)

In the news0 stories

No ingested article mentions this CVE yet.