未評価
In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as wel...
CVE-2021-25219
SecPulse初出
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Alpine Linux ALPINE-CVE-2021-25219 bind 修正版: 9.16.27-r0
- Debian DEBIAN-CVE-2021-25219 bind9 修正版: 1:9.17.19-1
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing.
参照URL
- advisory kb.isc.org
- advisory lists.debian.org
- advisory security.gentoo.org
- advisory security.netapp.com
- advisory debian.org
- advisory oracle.com
- patch cert-portal.siemens.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org