Skip to content
OpenAdvisories
Medium ALSA-2021:4384 1 CVE

Moderate: bind security and bug fix update

Published Nov 9, 2021 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: Broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly (CVE-2021-25214)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 15

ReleasePackageFixed in
AlmaLinux · 8 bind 32:9.11.26-6.el8
AlmaLinux · 8 bind-chroot 32:9.11.26-6.el8
AlmaLinux · 8 bind-devel 32:9.11.26-6.el8
AlmaLinux · 8 bind-libs 32:9.11.26-6.el8
AlmaLinux · 8 bind-libs-lite 32:9.11.26-6.el8
AlmaLinux · 8 bind-license 32:9.11.26-6.el8
AlmaLinux · 8 bind-lite-devel 32:9.11.26-6.el8
AlmaLinux · 8 bind-pkcs11 32:9.11.26-6.el8
AlmaLinux · 8 bind-pkcs11-devel 32:9.11.26-6.el8
AlmaLinux · 8 bind-pkcs11-libs 32:9.11.26-6.el8
AlmaLinux · 8 bind-pkcs11-utils 32:9.11.26-6.el8
AlmaLinux · 8 bind-sdb 32:9.11.26-6.el8
AlmaLinux · 8 bind-sdb-chroot 32:9.11.26-6.el8
AlmaLinux · 8 bind-utils 32:9.11.26-6.el8
AlmaLinux · 8 python3-bind 32:9.11.26-6.el8

Vulnerabilities 1

  • Medium 6.5
    CVE-2021-25214

    A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly

    In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vu…

    ISC BIND9 bind9 bind9 Debian Ubuntu Alpine

References

  • report
    https://vulners.com/cve/CVE-2021-25214