Skip to content
OpenAdvisories
Medium ALAS2-2021-1651 1 CVE

Moderate: bind security update (Amazon Linux 2)

Published Jun 16, 2021 · Updated Jun 22, 2021

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-25214: Incremental zone transfers (IXFR) provide a way of transferring changed portion(s) of a zone between servers. An IXFR stream containing SOA records with an owner name other than the transferred zone's apex may cause the receiving named server to inadvertently remove the SOA record for the zone in question from the zone database. This leads to an assertion failure when the next SOA refresh query for that zone is made. 1953849: CVE-2021-25214 bind: A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly

Fixed packages 17

ReleasePackageFixed in
Amazon Linux · 2 bind 32:9.11.4-26.P2.amzn2.5.2
Amazon Linux · 2 bind-chroot 32:9.11.4-26.P2.amzn2.5.2
Amazon Linux · 2 bind-debuginfo 32:9.11.4-26.P2.amzn2.5.2
Amazon Linux · 2 bind-devel 32:9.11.4-26.P2.amzn2.5.2
Amazon Linux · 2 bind-export-devel 32:9.11.4-26.P2.amzn2.5.2
Amazon Linux · 2 bind-export-libs 32:9.11.4-26.P2.amzn2.5.2
Amazon Linux · 2 bind-libs 32:9.11.4-26.P2.amzn2.5.2
Amazon Linux · 2 bind-libs-lite 32:9.11.4-26.P2.amzn2.5.2
Amazon Linux · 2 bind-license 32:9.11.4-26.P2.amzn2.5.2
Amazon Linux · 2 bind-lite-devel 32:9.11.4-26.P2.amzn2.5.2
Amazon Linux · 2 bind-pkcs11 32:9.11.4-26.P2.amzn2.5.2
Amazon Linux · 2 bind-pkcs11-devel 32:9.11.4-26.P2.amzn2.5.2
Amazon Linux · 2 bind-pkcs11-libs 32:9.11.4-26.P2.amzn2.5.2
Amazon Linux · 2 bind-pkcs11-utils 32:9.11.4-26.P2.amzn2.5.2
Amazon Linux · 2 bind-sdb 32:9.11.4-26.P2.amzn2.5.2
Amazon Linux · 2 bind-sdb-chroot 32:9.11.4-26.P2.amzn2.5.2
Amazon Linux · 2 bind-utils 32:9.11.4-26.P2.amzn2.5.2

Vulnerabilities 1

  • Medium 6.5
    CVE-2021-25214

    A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly

    In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vu…

    ISC BIND9 bind9 bind9 Debian Ubuntu Alpine

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-25214.html