Reachable Assertion in ISC BIND - CVE-2021-25215

Vulnerability identifier: #VU52736

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-25215

CWE-ID: CWE-617

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a reachable assertion when processing DNAME records. A remote attacker can force named to add the same RRset to the ANSWER section more than once, trigger an assertion failure and crash the service. Both authoritative and recursive servers are affected by this issue during zone transfers.

ISC BIND
Amazon Linux AMI
Arch Linux
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
Red Hat Enterprise Linux Server - Extended Life Cycle Support
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems)
Red Hat Enterprise Linux for IBM System z (Structure A)
CentOS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Anolis OS
IBM AIX
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, big endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
HPE Helion Openstack
Red Hat Enterprise Linux for ARM 64
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
SUSE Linux Enterprise Point of Sale
SUSE Linux Enterprise Debuginfo
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
Slackware Linux
Ubuntu
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Server Applications
openEuler
Fedora
BIG-IP
IBM Integrated Analytics System
Red Hat OpenShift GitOps
Cloud Pak for Security (CP4S)
IBM VIOS
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
BIG-IQ Centralized Management
Juniper Junos Space
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
bind9 (Debian package)
dnsperf
dhcp-debugsource
dhcp
dhcp-devel
dhcp-debuginfo
dhcp-help
bind (Red Hat package) main
bind9 (Ubuntu package)
bind-debuginfo
bind-debugsource
bind-devel
bind-libs-32bit
bind-utils
bind-libs
bind-doc
bind-chrootenv
bind
bind-utils-debuginfo
bind-libs-debuginfo
bind-libs-debuginfo-32bit
bind-lite-devel
bind-license
bind-sdb-chroot
bind-sdb
bind-pkcs11-utils
bind-pkcs11-libs
bind-pkcs11-devel
bind-pkcs11
bind-libs-lite
bind-export-libs
bind-export-devel
bind-chroot
python3-bind
libisc1107-debuginfo
libbind9-161
libbind9-161-debuginfo
libdns1110
libdns1110-debuginfo
libirs161
libirs161-debuginfo
libisc1107-32bit
libisc1107
libisc1107-debuginfo-32bit
libisccc161
libisccc161-debuginfo
libisccfg163
python-bind
libisccfg163-debuginfo
liblwres161
liblwres161-debuginfo
libns1604-debuginfo
libns1604
libisccfg1600
libbind9-1600
libbind9-1600-debuginfo
libdns1605
libdns1605-debuginfo
libirs-devel
libirs1601
libirs1601-debuginfo
libisc1606
libisc1606-debuginfo
libisccc1600
libisccfg1600-debuginfo
libisccc1600-debuginfo
bind-dyndb-ldap
HP-UX BIND
SINEC INS
OpenShift Virtualization
IBM Netezza Host Management
Dell EMC Unity XT Operating Environment (OE)
Dell EMC Unity VSA Operating Environment (OE)
Dell EMC Unity Operating Environment (OE)

Install updates from vendor's website.

ISC BIND - addressed in versions 9.11.31, 9.11.31-S1, 9.16.15, 9.16.15-S1, 9.17.12
Cloud Pak for Security (CP4S) - update to 1.8.0.0
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.0.8
bind9 (Debian package) - update to 1:9.11.5.P4+dfsg-5.1+deb10u5
HP-UX BIND - update to C.9.11.1.6.0
SINEC INS - update to 1.0.1.1
dnsperf - update to 2.3.4-6.fc32
OpenShift Virtualization - addressed in versions 2.6.6, 4.8.0
dhcp-debugsource - update to 4.4.2-8
dhcp - update to 4.4.2-8
dhcp-devel - update to 4.4.2-8
dhcp-debuginfo - update to 4.4.2-8
dhcp-help - update to 4.4.2-8
Dell EMC Unity XT Operating Environment (OE) - update to 5.1.2.0.5.007
Dell EMC Unity VSA Operating Environment (OE) - update to 5.1.2.0.5.007
Dell EMC Unity Operating Environment (OE) - update to 5.1.2.0.5.007
IBM Netezza Host Management - update to 5.4.31.0
bind (Red Hat package) main - addressed in versions 9.8.2-0.68.rc1.el6_10.11, 9.9.4-29.el7_2.11, 9.9.4-50.el7_3.6, 9.9.4-51.el7_4.6, 9.9.4-74.el7_6.7, 9.11.4-9.P2.el7_7.5, 9.11.4-26.P2.el7_9.5, 9.11.4-26.P2.el8_1.5, 9.11.13-6.el8_2.3, 9.11.26-4.el8_4
bind9 (Ubuntu package) - addressed in versions 1:9.9.5.dfsg-3ubuntu0.19+esm13, 1:9.10.3.dfsg.P4-8ubuntu1.19, 1:9.11.3+dfsg-1ubuntu1.15, 1:9.16.1-0ubuntu2.8, 1:9.16.6-3ubuntu1.2, 1:9.16.8-1ubuntu3.1
bind-debuginfo - addressed in versions 9.9.6P1-0.51.26.1, 9.9.9P1-63.25.1, 9.11.22-3.34.1, 9.16.6-12.49.1, 9.16.6-22.7.1
bind-debugsource - addressed in versions 9.9.6P1-0.51.26.1, 9.9.9P1-63.25.1, 9.11.22-3.34.1, 9.16.6-12.49.1, 9.16.6-22.7.1
bind-devel - addressed in versions 9.9.6P1-0.51.26.1, 9.11.22-3.34.1, 9.16.6-12.49.1, 9.16.6-22.7.1
bind-libs-32bit - addressed in versions 9.9.6P1-0.51.26.1, 9.9.9P1-63.25.1
bind-utils - addressed in versions 9.9.6P1-0.51.26.1, 9.9.9P1-63.25.1, 9.11.22-3.34.1, 9.16.6-12.49.1, 9.16.6-22.7.1
bind-libs - addressed in versions 9.9.6P1-0.51.26.1, 9.9.9P1-63.25.1
bind-doc - addressed in versions 9.9.6P1-0.51.26.1, 9.9.9P1-63.25.1, 9.11.22-3.34.1, 9.16.6-12.49.1, 9.16.6-22.7.1
bind-chrootenv - addressed in versions 9.9.6P1-0.51.26.1, 9.9.9P1-63.25.1, 9.11.22-3.34.1, 9.16.6-12.49.1, 9.16.6-22.7.1
bind - addressed in versions 9.9.6P1-0.51.26.1, 9.9.9P1-63.25.1, 9.11.22-3.34.1, 9.16.6-12.49.1, 9.16.6-22.7.1
bind-utils-debuginfo - addressed in versions 9.9.9P1-63.25.1, 9.11.22-3.34.1, 9.16.6-12.49.1, 9.16.6-22.7.1
bind-libs-debuginfo - update to 9.9.9P1-63.25.1
bind-libs-debuginfo-32bit - update to 9.9.9P1-63.25.1
bind-lite-devel - addressed in versions 9.11.4-26.P2, 9.11.13-6, 9.11.26-4
bind-license - addressed in versions 9.11.4-26.P2, 9.11.13-6, 9.11.26-4
bind-utils - addressed in versions 9.11.4-26.P2, 9.11.13-6, 9.11.26-4
bind-sdb-chroot - addressed in versions 9.11.4-26.P2, 9.11.13-6, 9.11.26-4
bind-sdb - addressed in versions 9.11.4-26.P2, 9.11.13-6, 9.11.26-4
bind-pkcs11-utils - addressed in versions 9.11.4-26.P2, 9.11.13-6, 9.11.26-4
bind-pkcs11-libs - addressed in versions 9.11.4-26.P2, 9.11.13-6, 9.11.26-4
bind-pkcs11-devel - addressed in versions 9.11.4-26.P2, 9.11.13-6, 9.11.26-4
bind-pkcs11 - addressed in versions 9.11.4-26.P2, 9.11.13-6, 9.11.26-4
bind-libs-lite - addressed in versions 9.11.4-26.P2, 9.11.13-6, 9.11.26-4
bind-libs - addressed in versions 9.11.4-26.P2, 9.11.13-6, 9.11.26-4
bind-export-libs - addressed in versions 9.11.4-26.P2, 9.11.13-6, 9.11.26-4
bind-export-devel - addressed in versions 9.11.4-26.P2, 9.11.13-6, 9.11.26-4
bind-devel - addressed in versions 9.11.4-26.P2, 9.11.13-6, 9.11.26-4
bind-chroot - addressed in versions 9.11.4-26.P2, 9.11.13-6, 9.11.26-4
bind - addressed in versions 9.11.4-26.P2, 9.11.13-6, 9.11.26-4
python3-bind - addressed in versions 9.11.13-6, 9.11.26-4
bind - update to 9.11.21-6
python3-bind - update to 9.11.21-6
bind-export-devel - update to 9.11.21-6
bind-export-libs - update to 9.11.21-6
bind-libs - update to 9.11.21-6
bind-libs-lite - update to 9.11.21-6
bind-pkcs11-devel - update to 9.11.21-6
bind-utils - update to 9.11.21-6
bind-devel - update to 9.11.21-6
bind-pkcs11 - update to 9.11.21-6
bind-chroot - update to 9.11.21-6
bind-debuginfo - update to 9.11.21-6
bind-debugsource - update to 9.11.21-6
libisc1107-debuginfo - update to 9.11.22-3.34.1
libbind9-161 - update to 9.11.22-3.34.1
libbind9-161-debuginfo - update to 9.11.22-3.34.1
libdns1110 - update to 9.11.22-3.34.1
libdns1110-debuginfo - update to 9.11.22-3.34.1
libirs161 - update to 9.11.22-3.34.1
libirs161-debuginfo - update to 9.11.22-3.34.1
libisc1107-32bit - update to 9.11.22-3.34.1
libisc1107 - update to 9.11.22-3.34.1
libisc1107-debuginfo-32bit - update to 9.11.22-3.34.1
libisccc161 - update to 9.11.22-3.34.1
libisccc161-debuginfo - update to 9.11.22-3.34.1
libisccfg163 - update to 9.11.22-3.34.1
python-bind - update to 9.11.22-3.34.1
libisccfg163-debuginfo - update to 9.11.22-3.34.1
liblwres161 - update to 9.11.22-3.34.1
liblwres161-debuginfo - update to 9.11.22-3.34.1
bind - addressed in versions 9.11.31-1.fc32, 9.11.31-1.fc33, 9.16.15-1.fc34
libns1604-debuginfo - addressed in versions 9.16.6-12.49.1, 9.16.6-22.7.1
libns1604 - addressed in versions 9.16.6-12.49.1, 9.16.6-22.7.1
libisccfg1600 - addressed in versions 9.16.6-12.49.1, 9.16.6-22.7.1
libbind9-1600 - addressed in versions 9.16.6-12.49.1, 9.16.6-22.7.1
libbind9-1600-debuginfo - addressed in versions 9.16.6-12.49.1, 9.16.6-22.7.1
libdns1605 - addressed in versions 9.16.6-12.49.1, 9.16.6-22.7.1
libdns1605-debuginfo - addressed in versions 9.16.6-12.49.1, 9.16.6-22.7.1
libirs-devel - addressed in versions 9.16.6-12.49.1, 9.16.6-22.7.1
libirs1601 - addressed in versions 9.16.6-12.49.1, 9.16.6-22.7.1
libirs1601-debuginfo - addressed in versions 9.16.6-12.49.1, 9.16.6-22.7.1
python3-bind - addressed in versions 9.16.6-12.49.1, 9.16.6-22.7.1
libisc1606 - addressed in versions 9.16.6-12.49.1, 9.16.6-22.7.1
libisc1606-debuginfo - addressed in versions 9.16.6-12.49.1, 9.16.6-22.7.1
libisccc1600 - addressed in versions 9.16.6-12.49.1, 9.16.6-22.7.1
libisccfg1600-debuginfo - addressed in versions 9.16.6-12.49.1, 9.16.6-22.7.1
libisccc1600-debuginfo - addressed in versions 9.16.6-12.49.1, 9.16.6-22.7.1
bind-dyndb-ldap - addressed in versions 11.3-6.fc32, 11.3-7.fc33, 11.7-3.fc34
Juniper Junos Space - update to 21.2R1

• https://kb.isc.org/v1/docs/cve-2021-25215
• http://www.openwall.com/lists/oss-security/2021/04/29/1

• Multiple vulnerabilities in ISC BIND
• Slackware Linux update for bind
• Arch Linux update for bind
• CentOS 7 update for bind
• Debian update for bind9
• Red Hat Enterprise Linux 6 Extended Lifecycle Support update for bind
• Red Hat Enterprise Linux 7 update for bind
• Red Hat Enterprise Linux 7.3 update for bind
• Red Hat Enterprise Linux 7.2 update for bind
• Red Hat Enterprise Linux 7.7 update for bind
• Red Hat Enterprise Linux 7.6 update for bind
• Red Hat Enterprise Linux 7.4 update for bind
• Denial of service in F5 BIG-IP BIND
• Red Hat Enterprise Linux 8 update for bind
• Red Hat Enterprise Linux 8.1 update for bind
• Red Hat Enterprise Linux 8.2 update for bind
• Multiple vulnerabilities in Red Hat OpenShift GitOps
• Amazon Linux AMI update for bind
• IBM AIX update for bind
• IBM VIOS update for bind
• Multiple vulnerabilities in Junos Space
• Multiple vulnerabilities in Dell EMC Unity
• Multiple vulnerabilities in IBM Integrated Analytics System
• Multiple vulnerabilities in Siemens SINEC INS
• SUSE update for bind
• SUSE update for bind
• SUSE update for bind
• Ubuntu update for bind9
• Multiple vulnerabilities in IBM Cloud Pak for Security
• Multiple vulnerabilities in IBM Netezza Host Management
• IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data update for ISC BIND
• SUSE update for bind
• SUSE update for bind
• openEuler 20.03 LTS SP1 update for bind
• openEuler update for dhcp
• Multiple vulnerabilities in OpenShift Virtualization 4.8
• Multiple vulnerabilities in OpenShift Virtualization 2.6
• Fedora 34 update for bind, bind-dyndb-ldap
• Fedora 33 update for bind, bind-dyndb-ldap
• Fedora 32 update for bind, bind-dyndb-ldap, dnsperf
• Multiple vulnerabilities in HPE HP-UX BIND
• Anolis OS update for bind (Anolis OS 8.2)
• Anolis OS update for bind (Anolis OS 8.4)
• Anolis OS update for bind
• Ubuntu update for bind9