Skip to content
OpenAdvisories
Medium USN-5126-2 1 CVE

bind9 vulnerability

Published Oct 28, 2021 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

USN-5126-1 fixed a vulnerability in Bind. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

Kishore Kumar Kothapalli discovered that Bind incorrectly handled the lame
cache when processing responses. A remote attacker could possibly use this
issue to cause Bind to consume resources, resulting in a denial of service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS bind9 1:9.9.5.dfsg-3ubuntu0.19+esm5
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS bind9 1:9.10.3.dfsg.P4-8ubuntu1.19+esm1

Vulnerabilities 1

  • Medium 5.3
    CVE-2021-25219 EPSS 11%

    Lame cache can be abused to severely degrade resolver performance

    In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authorita…

    ISC BIND9 bind9 bind9 Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2021-25219