Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-25218

A too-strict assertion check could be triggered when responses in BIND 9.16.19 and 9.17.16 require UDP fragmentation if RRL is in use

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
isc

Description

In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a vulnerable version of named receives a query under the circumstances described above, the named process will terminate due to a failed assertion check. The vulnerability affects only BIND 9 releases 9.16.19, 9.17.16, and release 9.16.19-S1 of the BIND Supported Preview Edition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ISC BIND9

  • Stable Branch 9.16.19affected
  • Development Branch 9.17.16affected
  • Supported Preview Edition 9.16.19-S1affected

References