CVE-2021-25220

EPSS 0.09%
Veröffentlicht 23.03.2022 13:15:07
Zuletzt bearbeitet 21.11.2024 05:54:34
Quelle security-officer@isc.org
Teams Watchlist Login
Unerledigt Login

BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 13

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Isc ≫ Bind SwEdition- Version >= 9.11.0 < 9.11.37

Isc ≫ Bind SwEditionsupported_preview Version >= 9.11.4 < 9.11.37

Isc ≫ Bind SwEdition- Version >= 9.12.0 < 9.16.27

Isc ≫ Bind SwEditionsupported_preview Version >= 9.16.8 < 9.16.27

Isc ≫ Bind SwEdition- Version >= 9.17.0 <= 9.18.0

Fedoraproject ≫ Fedora Version34

Fedoraproject ≫ Fedora Version35

Fedoraproject ≫ Fedora Version36

Netapp ≫ H300s Firmware Version-

Netapp ≫ H300s Version-

Netapp ≫ H500s Firmware Version-

Netapp ≫ H500s Version-

Netapp ≫ H700s Firmware Version-

Netapp ≫ H700s Version-

Netapp ≫ H300e Firmware Version-

Netapp ≫ H300e Version-

Netapp ≫ H500e Firmware Version-

Netapp ≫ H500e Version-

Netapp ≫ H700e Firmware Version-

Netapp ≫ H700e Version-

Netapp ≫ H410s Firmware Version-

Netapp ≫ H410s Version-

Netapp ≫ H410c Firmware Version-

Netapp ≫ H410c Version-

Siemens ≫ Sinec Ins Version < 1.0

Siemens ≫ Sinec Ins Version1.0 Update-

Siemens ≫ Sinec Ins Version1.0 Updatesp1

Juniper ≫ Junos Version < 19.3

   Juniper ≫ Srx100 Version-
   Juniper ≫ Srx110 Version-
   Juniper ≫ Srx1400 Version-
   Juniper ≫ Srx1500 Version-
   Juniper ≫ Srx210 Version-
   Juniper ≫ Srx220 Version-
   Juniper ≫ Srx240 Version-
   Juniper ≫ Srx240h2 Version-
   Juniper ≫ Srx240m Version-
   Juniper ≫ Srx300 Version-
   Juniper ≫ Srx320 Version-
   Juniper ≫ Srx340 Version-
   Juniper ≫ Srx3400 Version-
   Juniper ≫ Srx345 Version-
   Juniper ≫ Srx3600 Version-
   Juniper ≫ Srx380 Version-
   Juniper ≫ Srx4000 Version-
   Juniper ≫ Srx4100 Version-
   Juniper ≫ Srx4200 Version-
   Juniper ≫ Srx4600 Version-
   Juniper ≫ Srx5000 Version-
   Juniper ≫ Srx5400 Version-
   Juniper ≫ Srx550 Version-
   Juniper ≫ Srx550 Hm Version-
   Juniper ≫ Srx550m Version-
   Juniper ≫ Srx5600 Version-
   Juniper ≫ Srx5800 Version-
   Juniper ≫ Srx650 Version-

Juniper ≫ Junos Version19.3 Update-

Juniper ≫ Junos Version19.3 Updater1-s1

Juniper ≫ Junos Version19.3 Updater2

Juniper ≫ Junos Version19.3 Updater2-s1

Juniper ≫ Junos Version19.3 Updater2-s2

Juniper ≫ Junos Version19.3 Updater2-s3

Juniper ≫ Junos Version19.3 Updater2-s4

Juniper ≫ Junos Version19.3 Updater2-s5

Juniper ≫ Junos Version19.3 Updater2-s6

Juniper ≫ Junos Version19.3 Updater2-s7

Juniper ≫ Junos Version19.3 Updater3

Juniper ≫ Junos Version19.3 Updater3-s1

Juniper ≫ Junos Version19.3 Updater3-s2

Juniper ≫ Junos Version19.3 Updater3-s3

Juniper ≫ Junos Version19.3 Updater3-s4

Juniper ≫ Junos Version19.3 Updater3-s5

Juniper ≫ Junos Version19.3 Updater3-s6

Juniper ≫ Junos Version19.4 Update-

Juniper ≫ Junos Version19.4 Updater1

Juniper ≫ Junos Version19.4 Updater1-s1

Juniper ≫ Junos Version19.4 Updater1-s2

Juniper ≫ Junos Version19.4 Updater1-s3

Juniper ≫ Junos Version19.4 Updater1-s4

Juniper ≫ Junos Version19.4 Updater2

Juniper ≫ Junos Version19.4 Updater2-s1

Juniper ≫ Junos Version19.4 Updater2-s2

Juniper ≫ Junos Version19.4 Updater2-s3

Juniper ≫ Junos Version19.4 Updater2-s4

Juniper ≫ Junos Version19.4 Updater2-s5

Juniper ≫ Junos Version19.4 Updater2-s6

Juniper ≫ Junos Version19.4 Updater2-s7

Juniper ≫ Junos Version19.4 Updater3

Juniper ≫ Junos Version19.4 Updater3-s1

Juniper ≫ Junos Version19.4 Updater3-s2

Juniper ≫ Junos Version19.4 Updater3-s3

Juniper ≫ Junos Version19.4 Updater3-s4

Juniper ≫ Junos Version19.4 Updater3-s5

Juniper ≫ Junos Version19.4 Updater3-s6

Juniper ≫ Junos Version19.4 Updater3-s7

Juniper ≫ Junos Version19.4 Updater3-s8

Juniper ≫ Junos Version20.2 Update-

Juniper ≫ Junos Version20.2 Updater1

Juniper ≫ Junos Version20.2 Updater1-s1

Juniper ≫ Junos Version20.2 Updater1-s2

Juniper ≫ Junos Version20.2 Updater1-s3

Juniper ≫ Junos Version20.2 Updater2

Juniper ≫ Junos Version20.2 Updater2-s1

Juniper ≫ Junos Version20.2 Updater2-s2

Juniper ≫ Junos Version20.2 Updater2-s3

Juniper ≫ Junos Version20.2 Updater3

Juniper ≫ Junos Version20.2 Updater3-s1

Juniper ≫ Junos Version20.2 Updater3-s2

Juniper ≫ Junos Version20.2 Updater3-s3

Juniper ≫ Junos Version20.2 Updater3-s4

Juniper ≫ Junos Version20.3 Update-

Juniper ≫ Junos Version20.3 Updater1

Juniper ≫ Junos Version20.3 Updater1-s1

Juniper ≫ Junos Version20.3 Updater1-s2

Juniper ≫ Junos Version20.3 Updater2

Juniper ≫ Junos Version20.3 Updater2-s1

Juniper ≫ Junos Version20.3 Updater3

Juniper ≫ Junos Version20.3 Updater3-s1

Juniper ≫ Junos Version20.3 Updater3-s2

Juniper ≫ Junos Version20.3 Updater3-s3

Juniper ≫ Junos Version20.3 Updater3-s4

Juniper ≫ Junos Version20.4 Update-

Juniper ≫ Junos Version20.4 Updater1

Juniper ≫ Junos Version20.4 Updater1-s1

Juniper ≫ Junos Version20.4 Updater2

Juniper ≫ Junos Version20.4 Updater2-s1

Juniper ≫ Junos Version20.4 Updater2-s2

Juniper ≫ Junos Version20.4 Updater3

Juniper ≫ Junos Version20.4 Updater3-s1

Juniper ≫ Junos Version20.4 Updater3-s2

Juniper ≫ Junos Version20.4 Updater3-s3

Juniper ≫ Junos Version20.4 Updater3-s4

Juniper ≫ Junos Version21.1 Update-

Juniper ≫ Junos Version21.1 Updater1

Juniper ≫ Junos Version21.1 Updater1-s1

Juniper ≫ Junos Version21.1 Updater2

Juniper ≫ Junos Version21.1 Updater2-s1

Juniper ≫ Junos Version21.1 Updater2-s2

Juniper ≫ Junos Version21.1 Updater3

Juniper ≫ Junos Version21.1 Updater3-s1

Juniper ≫ Junos Version21.1 Updater3-s2

Juniper ≫ Junos Version21.2 Update-

Juniper ≫ Junos Version21.2 Updater1

Juniper ≫ Junos Version21.2 Updater1-s1

Juniper ≫ Junos Version21.2 Updater1-s2

Juniper ≫ Junos Version21.2 Updater2

Juniper ≫ Junos Version21.2 Updater2-s1

Juniper ≫ Junos Version21.2 Updater2-s2

Juniper ≫ Junos Version21.2 Updater3

Juniper ≫ Junos Version21.2 Updater3-s1

Juniper ≫ Junos Version21.3 Update-

Juniper ≫ Junos Version21.3 Updater1

Juniper ≫ Junos Version21.3 Updater1-s1

Juniper ≫ Junos Version21.3 Updater1-s2

Juniper ≫ Junos Version21.3 Updater2

Juniper ≫ Junos Version21.3 Updater2-s1

Juniper ≫ Junos Version21.3 Updater2-s2

Juniper ≫ Junos Version21.3 Updater3

Juniper ≫ Junos Version21.4 Update-

Juniper ≫ Junos Version21.4 Updater1

Juniper ≫ Junos Version21.4 Updater1-s1

Juniper ≫ Junos Version21.4 Updater1-s2

Juniper ≫ Junos Version21.4 Updater2

Juniper ≫ Junos Version22.1 Updater1

Juniper ≫ Junos Version22.1 Updater1-s1

Juniper ≫ Junos Version22.2 Updater1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.09%	0.266

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:N/I:P/A:N
nvd@nist.gov	6.8	2.3	4	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
security-officer@isc.org	6.8	2.3	4	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N

CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.

https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf

Patch

Third Party Advisory

https://security.gentoo.org/glsa/202210-25

Third Party Advisory

https://security.netapp.com/advisory/ntap-20220408-0001/

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYD7US4HZRFUGAJ66ZTHFBYVP5N3OQBY/

https://kb.isc.org/v1/docs/cve-2021-25220

Vendor Advisory

Mitigation

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2SXT7247QTKNBQ67MNRGZD23ADXU6E5U/