Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-25218

Fixed in a distro release EPSS 4%CVSS 7.5

In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a vulnerable version of named receives a query under the circumstances described above, the named process will terminate due to a failed assertion check. The vulnerability affects only BIND 9 releases 9.16.19, 9.17.16, and release 9.16.19-S1 of the BIND Supported Preview Edition.

Published 2021-08-18 · CVE record · OSV

Products: ISC BIND9

Distro releases

ReleasePackageFixed in
Alpine 3.11bind9.16.20-r0
Alpine 3.12bind9.16.20-r0
Alpine 3.13bind9.16.20-r0
Alpine 3.14bind9.16.20-r0
Alpine 3.15bind9.16.20-r0
Alpine 3.16bind9.16.20-r0
Alpine 3.17bind9.16.20-r0
Alpine 3.18bind9.16.20-r0
Alpine 3.19bind9.16.20-r0
Alpine 3.20bind9.16.20-r0
Alpine 3.21bind9.16.20-r0
Alpine 3.22bind9.16.20-r0
Alpine 3.23bind9.16.20-r0
Alpine 3.24bind9.16.20-r0
Arch Linuxbind9.16.20-1
Chainguardbind0
Chainguardbind-dev0
Chainguardbind-dnssec-root0
Chainguardbind-dnssec-tools0
Chainguardbind-doc0
Chainguardbind-libs0
Chainguardbind-plugins0
Chainguardbind-tools0
Wolfibind0
Wolfibind-dev0
Wolfibind-dnssec-root0
Wolfibind-dnssec-tools0
Wolfibind-doc0
Wolfibind-libs0
Wolfibind-plugins0
Wolfibind-tools0
openSUSE Tumbleweedbind9.16.20-1.4