Skip to content
OpenAdvisories
High ELSA-2021-1469 1 CVE

Important: bind security update (Oracle Linux 7)

Published Apr 30, 2021 · Updated Apr 30, 2021

Ecosystem: Oracle Linux

Summary

[32:9.11.4-26.P2.5]
- Possible assertion failure on DNAME processing (CVE-2021-25215)

Fixed packages 16

ReleasePackageFixed in
Oracle Linux · 7 bind 32:9.11.4-26.P2.el7_9.5
Oracle Linux · 7 bind-chroot 32:9.11.4-26.P2.el7_9.5
Oracle Linux · 7 bind-devel 32:9.11.4-26.P2.el7_9.5
Oracle Linux · 7 bind-export-devel 32:9.11.4-26.P2.el7_9.5
Oracle Linux · 7 bind-export-libs 32:9.11.4-26.P2.el7_9.5
Oracle Linux · 7 bind-libs 32:9.11.4-26.P2.el7_9.5
Oracle Linux · 7 bind-libs-lite 32:9.11.4-26.P2.el7_9.5
Oracle Linux · 7 bind-license 32:9.11.4-26.P2.el7_9.5
Oracle Linux · 7 bind-lite-devel 32:9.11.4-26.P2.el7_9.5
Oracle Linux · 7 bind-pkcs11 32:9.11.4-26.P2.el7_9.5
Oracle Linux · 7 bind-pkcs11-devel 32:9.11.4-26.P2.el7_9.5
Oracle Linux · 7 bind-pkcs11-libs 32:9.11.4-26.P2.el7_9.5
Oracle Linux · 7 bind-pkcs11-utils 32:9.11.4-26.P2.el7_9.5
Oracle Linux · 7 bind-sdb 32:9.11.4-26.P2.el7_9.5
Oracle Linux · 7 bind-sdb-chroot 32:9.11.4-26.P2.el7_9.5
Oracle Linux · 7 bind-utils 32:9.11.4-26.P2.el7_9.5

Vulnerabilities 1

  • High 7.5
    CVE-2021-25215 EPSS 12%

    An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself

    In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version o…

    ISC BIND9 bind9 bind9 Debian Ubuntu Alpine