CVE-2021-25219 — Lame cache can be abused to severely degrade resolver performance

Affected: ISC BIND9

In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing.

USN-5126-1 — bind9 vulnerability

Affected: Ubuntu:18.04:LTS: bind9, Ubuntu:20.04:LTS: bind9

Kishore Kumar Kothapalli discovered that Bind incorrectly handled the lame cache when processing responses. A remote attacker could possibly use this issue to cause Bind to consume resources, resulting in a denial of service.

Most recent entries from all

CVE-2021-25219 — Lame cache can be abused to severely degrade resolver performance

USN-5126-1 — bind9 vulnerability