Skip to content
OpenAdvisories
Medium DSA-4994-1 1 CVE

bind9 - security update

Published Oct 28, 2021 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 10 bind9 1:9.11.5.P4+dfsg-5.1+deb10u6
Debian · 11 bind9 1:9.16.22-1~deb11u1

Vulnerabilities 1

  • Medium 5.3
    CVE-2021-25219 EPSS 11%

    Lame cache can be abused to severely degrade resolver performance

    In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authorita…