Skip to content
OpenAdvisories
Medium USN-5332-2 1 CVE

bind9 vulnerability

Published Mar 17, 2022 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

USN-5332-1 fixed a vulnerability in Bind. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

Xiang Li, Baojun Liu, Chaoyi Lu, and Changgen Zou discovered that Bind
incorrectly handled certain bogus NS records when using forwarders. A
remote attacker could possibly use this issue to manipulate cache results.
(CVE-2021-25220)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS bind9 1:9.9.5.dfsg-3ubuntu0.19+esm6
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS bind9 1:9.10.3.dfsg.P4-8ubuntu1.19+esm2

Vulnerabilities 1

  • Medium 6.8
    CVE-2021-25220

    DNS forwarders - cache poisoning vulnerability

    BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to…

    ISC BIND bind9 bind9 Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2021-25220