CVE-2021-25220

EPSS 3.36%
Veröffentlicht 23.03.2022 13:15:07
Zuletzt bearbeitet 21.11.2024 05:54:34
Erkennungen
Login

DNS forwarders - cache poisoning vulnerability

BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 13

NVD 130 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Isc ≫ Bind SwEdition - Version >= 9.11.0 < 9.11.37

Isc ≫ Bind SwEdition supported_preview Version >= 9.11.4 < 9.11.37

Isc ≫ Bind SwEdition - Version >= 9.12.0 < 9.16.27

Isc ≫ Bind SwEdition supported_preview Version >= 9.16.8 < 9.16.27

Isc ≫ Bind SwEdition - Version >= 9.17.0 <= 9.18.0

Fedoraproject ≫ Fedora Version 34

Fedoraproject ≫ Fedora Version 35

Fedoraproject ≫ Fedora Version 36

Netapp ≫ H300s Firmware Version -

Netapp ≫ H300s Version -

Netapp ≫ H500s Firmware Version -

Netapp ≫ H500s Version -

Netapp ≫ H700s Firmware Version -

Netapp ≫ H700s Version -

Netapp ≫ H300e Firmware Version -

Netapp ≫ H300e Version -

Netapp ≫ H500e Firmware Version -

Netapp ≫ H500e Version -

Netapp ≫ H700e Firmware Version -

Netapp ≫ H700e Version -

Netapp ≫ H410s Firmware Version -

Netapp ≫ H410s Version -

Netapp ≫ H410c Firmware Version -

Netapp ≫ H410c Version -

Siemens ≫ Sinec Ins Version < 1.0

Siemens ≫ Sinec Ins Version 1.0 Update -

Siemens ≫ Sinec Ins Version 1.0 Update sp1

Juniper ≫ Junos Version < 19.3

   Juniper ≫ Srx100 Version -
   Juniper ≫ Srx110 Version -
   Juniper ≫ Srx1400 Version -
   Juniper ≫ Srx1500 Version -
   Juniper ≫ Srx210 Version -
   Juniper ≫ Srx220 Version -
   Juniper ≫ Srx240 Version -
   Juniper ≫ Srx240h2 Version -
   Juniper ≫ Srx240m Version -
   Juniper ≫ Srx300 Version -
   Juniper ≫ Srx320 Version -
   Juniper ≫ Srx340 Version -
   Juniper ≫ Srx3400 Version -
   Juniper ≫ Srx345 Version -
   Juniper ≫ Srx3600 Version -
   Juniper ≫ Srx380 Version -
   Juniper ≫ Srx4000 Version -
   Juniper ≫ Srx4100 Version -
   Juniper ≫ Srx4200 Version -
   Juniper ≫ Srx4600 Version -
   Juniper ≫ Srx5000 Version -
   Juniper ≫ Srx5400 Version -
   Juniper ≫ Srx550 Version -
   Juniper ≫ Srx550 Hm Version -
   Juniper ≫ Srx550m Version -
   Juniper ≫ Srx5600 Version -
   Juniper ≫ Srx5800 Version -
   Juniper ≫ Srx650 Version -

Juniper ≫ Junos Version 19.3 Update -

Juniper ≫ Junos Version 19.3 Update r1-s1

Juniper ≫ Junos Version 19.3 Update r2

Juniper ≫ Junos Version 19.3 Update r2-s1

Juniper ≫ Junos Version 19.3 Update r2-s2

Juniper ≫ Junos Version 19.3 Update r2-s3

Juniper ≫ Junos Version 19.3 Update r2-s4

Juniper ≫ Junos Version 19.3 Update r2-s5

Juniper ≫ Junos Version 19.3 Update r2-s6

Juniper ≫ Junos Version 19.3 Update r2-s7

Juniper ≫ Junos Version 19.3 Update r3

Juniper ≫ Junos Version 19.3 Update r3-s1

Juniper ≫ Junos Version 19.3 Update r3-s2

Juniper ≫ Junos Version 19.3 Update r3-s3

Juniper ≫ Junos Version 19.3 Update r3-s4

Juniper ≫ Junos Version 19.3 Update r3-s5

Juniper ≫ Junos Version 19.3 Update r3-s6

Juniper ≫ Junos Version 19.4 Update -

Juniper ≫ Junos Version 19.4 Update r1

Juniper ≫ Junos Version 19.4 Update r1-s1

Juniper ≫ Junos Version 19.4 Update r1-s2

Juniper ≫ Junos Version 19.4 Update r1-s3

Juniper ≫ Junos Version 19.4 Update r1-s4

Juniper ≫ Junos Version 19.4 Update r2

Juniper ≫ Junos Version 19.4 Update r2-s1

Juniper ≫ Junos Version 19.4 Update r2-s2

Juniper ≫ Junos Version 19.4 Update r2-s3

Juniper ≫ Junos Version 19.4 Update r2-s4

Juniper ≫ Junos Version 19.4 Update r2-s5

Juniper ≫ Junos Version 19.4 Update r2-s6

Juniper ≫ Junos Version 19.4 Update r2-s7

Juniper ≫ Junos Version 19.4 Update r3

Juniper ≫ Junos Version 19.4 Update r3-s1

Juniper ≫ Junos Version 19.4 Update r3-s2

Juniper ≫ Junos Version 19.4 Update r3-s3

Juniper ≫ Junos Version 19.4 Update r3-s4

Juniper ≫ Junos Version 19.4 Update r3-s5

Juniper ≫ Junos Version 19.4 Update r3-s6

Juniper ≫ Junos Version 19.4 Update r3-s7

Juniper ≫ Junos Version 19.4 Update r3-s8

Juniper ≫ Junos Version 20.2 Update -

Juniper ≫ Junos Version 20.2 Update r1

Juniper ≫ Junos Version 20.2 Update r1-s1

Juniper ≫ Junos Version 20.2 Update r1-s2

Juniper ≫ Junos Version 20.2 Update r1-s3

Juniper ≫ Junos Version 20.2 Update r2

Juniper ≫ Junos Version 20.2 Update r2-s1

Juniper ≫ Junos Version 20.2 Update r2-s2

Juniper ≫ Junos Version 20.2 Update r2-s3

Juniper ≫ Junos Version 20.2 Update r3

Juniper ≫ Junos Version 20.2 Update r3-s1

Juniper ≫ Junos Version 20.2 Update r3-s2

Juniper ≫ Junos Version 20.2 Update r3-s3

Juniper ≫ Junos Version 20.2 Update r3-s4

Juniper ≫ Junos Version 20.3 Update -

Juniper ≫ Junos Version 20.3 Update r1

Juniper ≫ Junos Version 20.3 Update r1-s1

Juniper ≫ Junos Version 20.3 Update r1-s2

Juniper ≫ Junos Version 20.3 Update r2

Juniper ≫ Junos Version 20.3 Update r2-s1

Juniper ≫ Junos Version 20.3 Update r3

Juniper ≫ Junos Version 20.3 Update r3-s1

Juniper ≫ Junos Version 20.3 Update r3-s2

Juniper ≫ Junos Version 20.3 Update r3-s3

Juniper ≫ Junos Version 20.3 Update r3-s4

Juniper ≫ Junos Version 20.4 Update -

Juniper ≫ Junos Version 20.4 Update r1

Juniper ≫ Junos Version 20.4 Update r1-s1

Juniper ≫ Junos Version 20.4 Update r2

Juniper ≫ Junos Version 20.4 Update r2-s1

Juniper ≫ Junos Version 20.4 Update r2-s2

Juniper ≫ Junos Version 20.4 Update r3

Juniper ≫ Junos Version 20.4 Update r3-s1

Juniper ≫ Junos Version 20.4 Update r3-s2

Juniper ≫ Junos Version 20.4 Update r3-s3

Juniper ≫ Junos Version 20.4 Update r3-s4

Juniper ≫ Junos Version 21.1 Update -

Juniper ≫ Junos Version 21.1 Update r1

Juniper ≫ Junos Version 21.1 Update r1-s1

Juniper ≫ Junos Version 21.1 Update r2

Juniper ≫ Junos Version 21.1 Update r2-s1

Juniper ≫ Junos Version 21.1 Update r2-s2

Juniper ≫ Junos Version 21.1 Update r3

Juniper ≫ Junos Version 21.1 Update r3-s1

Juniper ≫ Junos Version 21.1 Update r3-s2

Juniper ≫ Junos Version 21.2 Update -

Juniper ≫ Junos Version 21.2 Update r1

Juniper ≫ Junos Version 21.2 Update r1-s1

Juniper ≫ Junos Version 21.2 Update r1-s2

Juniper ≫ Junos Version 21.2 Update r2

Juniper ≫ Junos Version 21.2 Update r2-s1

Juniper ≫ Junos Version 21.2 Update r2-s2

Juniper ≫ Junos Version 21.2 Update r3

Juniper ≫ Junos Version 21.2 Update r3-s1

Juniper ≫ Junos Version 21.3 Update -

Juniper ≫ Junos Version 21.3 Update r1

Juniper ≫ Junos Version 21.3 Update r1-s1

Juniper ≫ Junos Version 21.3 Update r1-s2

Juniper ≫ Junos Version 21.3 Update r2

Juniper ≫ Junos Version 21.3 Update r2-s1

Juniper ≫ Junos Version 21.3 Update r2-s2

Juniper ≫ Junos Version 21.3 Update r3

Juniper ≫ Junos Version 21.4 Update -

Juniper ≫ Junos Version 21.4 Update r1

Juniper ≫ Junos Version 21.4 Update r1-s1

Juniper ≫ Junos Version 21.4 Update r1-s2

Juniper ≫ Junos Version 21.4 Update r2

Juniper ≫ Junos Version 22.1 Update r1

Juniper ≫ Junos Version 22.1 Update r1-s1

Juniper ≫ Junos Version 22.2 Update r1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.36%	0.874

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4	8	2.9	AV:N/AC:L/Au:S/C:N/I:P/A:N
NIST	6.8	2.3	4	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
ISC	6.8	2.3	4	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N

CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.

https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf

Patch

Third Party Advisory

https://security.gentoo.org/glsa/202210-25

Third Party Advisory

https://security.netapp.com/advisory/ntap-20220408-0001/

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYD7US4HZRFUGAJ66ZTHFBYVP5N3OQBY/

https://kb.isc.org/v1/docs/cve-2021-25220

Vendor Advisory

Mitigation

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2SXT7247QTKNBQ67MNRGZD23ADXU6E5U/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5VX3I2U3ICOIEI5Y7OYA6CHOLFMNH3YQ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/API7U5E7SX7BAAVFNW366FFJGD6NZZKV/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DE3UAVCPUMAKG27ZL5YXSP2C3RIOW3JZ/

https://supportportal.juniper.net/s/article/2022-10-Security-Bulletin-Junos-OS-SRX-Series-Cache-poisoning-vulnerability-in-BIND-used-by-DNS-Proxy-CVE-2021-25220?language=en_US

https://nvd.nist.gov/vuln/detail/CVE-2021-25220

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-25220

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-25220

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2021-25220