CVE-2021-25220

CVSS v3.1 6.8 (Medium)

CVSS v2.0 4 (Medium)

EPSS 0.17 % (55^th)

Affected Products 48

Advisories 41

BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.

Weaknesses

CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

CVE Status: PUBLISHED
CNA: Internet Systems Consortium (ISC)
Published Date: 2022-03-23 13:15:07
(2 years ago)
Updated Date: 2023-11-09 14:44:33
(10 months ago)

Affected Products

Fedoraproject

Fedora

Isc

Bind

Juniper

Netapp

Siemens

Sinec Ins

Configuration #1

	CPE23	From	Up To
Isc Bind from 9.11.0 version and prior 9.11.37 version	cpe:2.3:a:isc:bind::::*:-	>= 9.11.0	< 9.11.37
Isc Bind from 9.11.4 version and prior 9.11.37 version	cpe:2.3:a:isc:bind::::*:supported_preview	>= 9.11.4	< 9.11.37
Isc Bind from 9.12.0 version and prior 9.16.27 version	cpe:2.3:a:isc:bind::::*:-	>= 9.12.0	< 9.16.27
Isc Bind from 9.16.8 version and prior 9.16.27 version	cpe:2.3:a:isc:bind::::*:supported_preview	>= 9.16.8	< 9.16.27
Isc Bind from 9.17.0 version and 9.18.0 and prior versions	cpe:2.3:a:isc:bind::::*:-	>= 9.17.0	<= 9.18.0

Configuration #2

		CPE23	From	Up To
	Fedoraproject Fedora 34	cpe:2.3:o:fedoraproject:fedora:34
	Fedoraproject Fedora 35	cpe:2.3:o:fedoraproject:fedora:35
	Fedoraproject Fedora 36	cpe:2.3:o:fedoraproject:fedora:36

Configuration #3

AND

		CPE23
OR
	Netapp H300s Firmware	cpe:2.3:o:netapp:h300s_firmware:-
OR
	Running on/with
	Netapp H300s	cpe:2.3:h:netapp:h300s:-

Configuration #4

AND

		CPE23
OR
	Netapp H500s Firmware	cpe:2.3:o:netapp:h500s_firmware:-
OR
	Running on/with
	Netapp H500s	cpe:2.3:h:netapp:h500s:-

Configuration #5

AND

		CPE23
OR
	Netapp H700s Firmware	cpe:2.3:o:netapp:h700s_firmware:-
OR
	Running on/with
	Netapp H700s	cpe:2.3:h:netapp:h700s:-

Configuration #6

AND

		CPE23
OR
	Netapp H300e Firmware	cpe:2.3:o:netapp:h300e_firmware:-
OR
	Running on/with
	Netapp H300e	cpe:2.3:h:netapp:h300e:-

Configuration #7

AND

		CPE23
OR
	Netapp H500e Firmware	cpe:2.3:o:netapp:h500e_firmware:-
OR
	Running on/with
	Netapp H500e	cpe:2.3:h:netapp:h500e:-

Configuration #8

AND

		CPE23
OR
	Netapp H700e Firmware	cpe:2.3:o:netapp:h700e_firmware:-
OR
	Running on/with
	Netapp H700e	cpe:2.3:h:netapp:h700e:-

Configuration #9

AND

		CPE23
OR
	Netapp H410s Firmware	cpe:2.3:o:netapp:h410s_firmware:-
OR
	Running on/with
	Netapp H410s	cpe:2.3:h:netapp:h410s:-

Configuration #10

AND

		CPE23
OR
	Netapp H410c Firmware	cpe:2.3:o:netapp:h410c_firmware:-
OR
	Running on/with
	Netapp H410c	cpe:2.3:h:netapp:h410c:-

Configuration #11

	CPE23	Up To
Siemens Sinec Ins prior 1.0 version	cpe:2.3:a:siemens:sinec_ins	< 1.0
Siemens Sinec Ins 1.0	cpe:2.3:a:siemens:sinec_ins:1.0:-
Siemens Sinec Ins 1.0 SP1	cpe:2.3:a:siemens:sinec_ins:1.0:sp1

Configuration #12

AND

		CPE23	Up To
OR
	Juniper Junos prior 19.3 version	cpe:2.3:o:juniper:junos	< 19.3
OR
	Running on/with
	Juniper Junos 19.3	cpe:2.3:o:juniper:junos:19.3:-
OR
	Running on/with
	Juniper Junos 19.3 R1-s1	cpe:2.3:o:juniper:junos:19.3:r1-s1
OR
	Running on/with
	Juniper Junos 19.3 R2	cpe:2.3:o:juniper:junos:19.3:r2
OR
	Running on/with
	Juniper Junos 19.3 R2-s1	cpe:2.3:o:juniper:junos:19.3:r2-s1
OR
	Running on/with
	Juniper Junos 19.3 R2-s2	cpe:2.3:o:juniper:junos:19.3:r2-s2
OR
	Running on/with
	Juniper Junos 19.3 R2-s3	cpe:2.3:o:juniper:junos:19.3:r2-s3
OR
	Running on/with
	Juniper Junos 19.3 R2-s4	cpe:2.3:o:juniper:junos:19.3:r2-s4
OR
	Running on/with
	Juniper Junos 19.3 R2-s5	cpe:2.3:o:juniper:junos:19.3:r2-s5
OR
	Running on/with
	Juniper Junos 19.3 R2-s6	cpe:2.3:o:juniper:junos:19.3:r2-s6
OR
	Running on/with
	Juniper Junos 19.3 R2-s7	cpe:2.3:o:juniper:junos:19.3:r2-s7
OR
	Running on/with
	Juniper Junos 19.3 R3	cpe:2.3:o:juniper:junos:19.3:r3
OR
	Running on/with
	Juniper Junos 19.3 R3-s1	cpe:2.3:o:juniper:junos:19.3:r3-s1
OR
	Running on/with
	Juniper Junos 19.3 R3-s2	cpe:2.3:o:juniper:junos:19.3:r3-s2
OR
	Running on/with
	Juniper Junos 19.3 R3-s3	cpe:2.3:o:juniper:junos:19.3:r3-s3
OR
	Running on/with
	Juniper Junos 19.3 R3-s4	cpe:2.3:o:juniper:junos:19.3:r3-s4
OR
	Running on/with
	Juniper Junos 19.3 R3-s5	cpe:2.3:o:juniper:junos:19.3:r3-s5
OR
	Running on/with
	Juniper Junos 19.3 R3-s6	cpe:2.3:o:juniper:junos:19.3:r3-s6
OR
	Running on/with
	Juniper Junos 19.4	cpe:2.3:o:juniper:junos:19.4:-
OR
	Running on/with
	Juniper Junos 19.4 R1	cpe:2.3:o:juniper:junos:19.4:r1
OR
	Running on/with
	Juniper Junos 19.4 R1-s1	cpe:2.3:o:juniper:junos:19.4:r1-s1
OR
	Running on/with
	Juniper Junos 19.4 R1-s2	cpe:2.3:o:juniper:junos:19.4:r1-s2
OR
	Running on/with
	Juniper Junos 19.4 R1-s3	cpe:2.3:o:juniper:junos:19.4:r1-s3
OR
	Running on/with
	Juniper Junos 19.4 R1-s4	cpe:2.3:o:juniper:junos:19.4:r1-s4
OR
	Running on/with
	Juniper Junos 19.4 R2	cpe:2.3:o:juniper:junos:19.4:r2
OR
	Running on/with
	Juniper Junos 19.4 R2-s1	cpe:2.3:o:juniper:junos:19.4:r2-s1
OR
	Running on/with
	Juniper Junos 19.4 R2-s2	cpe:2.3:o:juniper:junos:19.4:r2-s2
OR
	Running on/with
	Juniper Junos 19.4 R2-s3	cpe:2.3:o:juniper:junos:19.4:r2-s3
OR
	Running on/with
	Juniper Junos 19.4 R2-s4	cpe:2.3:o:juniper:junos:19.4:r2-s4
OR
	Running on/with
	Juniper Junos 19.4 R2-s5	cpe:2.3:o:juniper:junos:19.4:r2-s5
OR
	Running on/with
	Juniper Junos 19.4 R2-s6	cpe:2.3:o:juniper:junos:19.4:r2-s6
OR
	Running on/with
	Juniper Junos 19.4 R2-s7	cpe:2.3:o:juniper:junos:19.4:r2-s7
OR
	Running on/with
	Juniper Junos 19.4 R3	cpe:2.3:o:juniper:junos:19.4:r3
OR
	Running on/with
	Juniper Junos 19.4 R3-s1	cpe:2.3:o:juniper:junos:19.4:r3-s1
OR
	Running on/with
	Juniper Junos 19.4 R3-s2	cpe:2.3:o:juniper:junos:19.4:r3-s2
OR
	Running on/with
	Juniper Junos 19.4 R3-s3	cpe:2.3:o:juniper:junos:19.4:r3-s3
OR
	Running on/with
	Juniper Junos 19.4 R3-s4	cpe:2.3:o:juniper:junos:19.4:r3-s4
OR
	Running on/with
	Juniper Junos 19.4 R3-s5	cpe:2.3:o:juniper:junos:19.4:r3-s5
OR
	Running on/with
	Juniper Junos 19.4 R3-s6	cpe:2.3:o:juniper:junos:19.4:r3-s6
OR
	Running on/with
	Juniper Junos 19.4 R3-s7	cpe:2.3:o:juniper:junos:19.4:r3-s7
OR
	Running on/with
	Juniper Junos 19.4 R3-s8	cpe:2.3:o:juniper:junos:19.4:r3-s8
OR
	Running on/with
	Juniper Junos 20.2	cpe:2.3:o:juniper:junos:20.2:-
OR
	Running on/with
	Juniper Junos 20.2 R1	cpe:2.3:o:juniper:junos:20.2:r1
OR
	Running on/with
	Juniper Junos 20.2 R1-s1	cpe:2.3:o:juniper:junos:20.2:r1-s1
OR
	Running on/with
	Juniper Junos 20.2 R1-s2	cpe:2.3:o:juniper:junos:20.2:r1-s2
OR
	Running on/with
	Juniper Junos 20.2 R1-s3	cpe:2.3:o:juniper:junos:20.2:r1-s3
OR
	Running on/with
	Juniper Junos 20.2 R2	cpe:2.3:o:juniper:junos:20.2:r2
OR
	Running on/with
	Juniper Junos 20.2 R2-s1	cpe:2.3:o:juniper:junos:20.2:r2-s1
OR
	Running on/with
	Juniper Junos 20.2 R2-s2	cpe:2.3:o:juniper:junos:20.2:r2-s2
OR
	Running on/with
	Juniper Junos 20.2 R2-s3	cpe:2.3:o:juniper:junos:20.2:r2-s3
OR
	Running on/with
	Juniper Junos 20.2 R3	cpe:2.3:o:juniper:junos:20.2:r3
OR
	Running on/with
	Juniper Junos 20.2 R3-s1	cpe:2.3:o:juniper:junos:20.2:r3-s1
OR
	Running on/with
	Juniper Junos 20.2 R3-s2	cpe:2.3:o:juniper:junos:20.2:r3-s2
OR
	Running on/with
	Juniper Junos 20.2 R3-s3	cpe:2.3:o:juniper:junos:20.2:r3-s3
OR
	Running on/with
	Juniper Junos 20.2 R3-s4	cpe:2.3:o:juniper:junos:20.2:r3-s4
OR
	Running on/with
	Juniper Junos 20.3	cpe:2.3:o:juniper:junos:20.3:-
OR
	Running on/with
	Juniper Junos 20.3 R1	cpe:2.3:o:juniper:junos:20.3:r1
OR
	Running on/with
	Juniper Junos 20.3 R1-s1	cpe:2.3:o:juniper:junos:20.3:r1-s1
OR
	Running on/with
	Juniper Junos 20.3 R1-s2	cpe:2.3:o:juniper:junos:20.3:r1-s2
OR
	Running on/with
	Juniper Junos 20.3 R2	cpe:2.3:o:juniper:junos:20.3:r2
OR
	Running on/with
	Juniper Junos 20.3 R2-s1	cpe:2.3:o:juniper:junos:20.3:r2-s1
OR
	Running on/with
	Juniper Junos 20.3 R3	cpe:2.3:o:juniper:junos:20.3:r3
OR
	Running on/with
	Juniper Junos 20.3 R3-s1	cpe:2.3:o:juniper:junos:20.3:r3-s1
OR
	Running on/with
	Juniper Junos 20.3 R3-s2	cpe:2.3:o:juniper:junos:20.3:r3-s2
OR
	Running on/with
	Juniper Junos 20.3 R3-s3	cpe:2.3:o:juniper:junos:20.3:r3-s3
OR
	Running on/with
	Juniper Junos 20.3 R3-s4	cpe:2.3:o:juniper:junos:20.3:r3-s4
OR
	Running on/with
	Juniper Junos 20.4	cpe:2.3:o:juniper:junos:20.4:-
OR
	Running on/with
	Juniper Junos 20.4 R1	cpe:2.3:o:juniper:junos:20.4:r1
OR
	Running on/with
	Juniper Junos 20.4 R1-s1	cpe:2.3:o:juniper:junos:20.4:r1-s1
OR
	Running on/with
	Juniper Junos 20.4 R2	cpe:2.3:o:juniper:junos:20.4:r2
OR
	Running on/with
	Juniper Junos 20.4 R2-s1	cpe:2.3:o:juniper:junos:20.4:r2-s1
OR
	Running on/with
	Juniper Junos 20.4 R2-s2	cpe:2.3:o:juniper:junos:20.4:r2-s2
OR
	Running on/with
	Juniper Junos 20.4 R3	cpe:2.3:o:juniper:junos:20.4:r3
OR
	Running on/with
	Juniper Junos 20.4 R3-s1	cpe:2.3:o:juniper:junos:20.4:r3-s1
OR
	Running on/with
	Juniper Junos 20.4 R3-s2	cpe:2.3:o:juniper:junos:20.4:r3-s2
OR
	Running on/with
	Juniper Junos 20.4 R3-s3	cpe:2.3:o:juniper:junos:20.4:r3-s3
OR
	Running on/with
	Juniper Junos 20.4 R3-s4	cpe:2.3:o:juniper:junos:20.4:r3-s4
OR
	Running on/with
	Juniper Junos 21.1	cpe:2.3:o:juniper:junos:21.1:-
OR
	Running on/with
	Juniper Junos 21.1 R1	cpe:2.3:o:juniper:junos:21.1:r1
OR
	Running on/with
	Juniper Junos 21.1 R1-s1	cpe:2.3:o:juniper:junos:21.1:r1-s1
OR
	Running on/with
	Juniper Junos 21.1 R2	cpe:2.3:o:juniper:junos:21.1:r2
OR
	Running on/with
	Juniper Junos 21.1 R2-s1	cpe:2.3:o:juniper:junos:21.1:r2-s1
OR
	Running on/with
	Juniper Junos 21.1 R2-s2	cpe:2.3:o:juniper:junos:21.1:r2-s2
OR
	Running on/with
	Juniper Junos 21.1 R3	cpe:2.3:o:juniper:junos:21.1:r3
OR
	Running on/with
	Juniper Junos 21.1 R3-s1	cpe:2.3:o:juniper:junos:21.1:r3-s1
OR
	Running on/with
	Juniper Junos 21.1 R3-s2	cpe:2.3:o:juniper:junos:21.1:r3-s2
OR
	Running on/with
	Juniper Junos 21.2	cpe:2.3:o:juniper:junos:21.2:-
OR
	Running on/with
	Juniper Junos 21.2 R1	cpe:2.3:o:juniper:junos:21.2:r1
OR
	Running on/with
	Juniper Junos 21.2 R1-s1	cpe:2.3:o:juniper:junos:21.2:r1-s1
OR
	Running on/with
	Juniper Junos 21.2 R1-s2	cpe:2.3:o:juniper:junos:21.2:r1-s2
OR
	Running on/with
	Juniper Junos 21.2 R2	cpe:2.3:o:juniper:junos:21.2:r2
OR
	Running on/with
	Juniper Junos 21.2 R2-s1	cpe:2.3:o:juniper:junos:21.2:r2-s1
OR
	Running on/with
	Juniper Junos 21.2 R2-s2	cpe:2.3:o:juniper:junos:21.2:r2-s2
OR
	Running on/with
	Juniper Junos 21.2 R3	cpe:2.3:o:juniper:junos:21.2:r3
OR
	Running on/with
	Juniper Junos 21.2 R3-s1	cpe:2.3:o:juniper:junos:21.2:r3-s1
OR
	Running on/with
	Juniper Junos 21.3	cpe:2.3:o:juniper:junos:21.3:-
OR
	Running on/with
	Juniper Junos 21.3 R1	cpe:2.3:o:juniper:junos:21.3:r1
OR
	Running on/with
	Juniper Junos 21.3 R1-s1	cpe:2.3:o:juniper:junos:21.3:r1-s1
OR
	Running on/with
	Juniper Junos 21.3 R1-s2	cpe:2.3:o:juniper:junos:21.3:r1-s2
OR
	Running on/with
	Juniper Junos 21.3 R2	cpe:2.3:o:juniper:junos:21.3:r2
OR
	Running on/with
	Juniper Junos 21.3 R2-s1	cpe:2.3:o:juniper:junos:21.3:r2-s1
OR
	Running on/with
	Juniper Junos 21.3 R2-s2	cpe:2.3:o:juniper:junos:21.3:r2-s2
OR
	Running on/with
	Juniper Junos 21.3 R3	cpe:2.3:o:juniper:junos:21.3:r3
OR
	Running on/with
	Juniper Junos 21.4	cpe:2.3:o:juniper:junos:21.4:-
OR
	Running on/with
	Juniper Junos 21.4 R1	cpe:2.3:o:juniper:junos:21.4:r1
OR
	Running on/with
	Juniper Junos 21.4 R1-s1	cpe:2.3:o:juniper:junos:21.4:r1-s1
OR
	Running on/with
	Juniper Junos 21.4 R1-s2	cpe:2.3:o:juniper:junos:21.4:r1-s2
OR
	Running on/with
	Juniper Junos 21.4 R2	cpe:2.3:o:juniper:junos:21.4:r2
OR
	Running on/with
	Juniper Junos 22.1 R1	cpe:2.3:o:juniper:junos:22.1:r1
OR
	Running on/with
	Juniper Junos 22.1 R1-s1	cpe:2.3:o:juniper:junos:22.1:r1-s1
OR
	Running on/with
	Juniper Junos 22.2 R1	cpe:2.3:o:juniper:junos:22.2:r1
OR
	Running on/with
	Juniper Srx100	cpe:2.3:h:juniper:srx100:-
OR
	Running on/with
	Juniper Srx110	cpe:2.3:h:juniper:srx110:-
OR
	Running on/with
	Juniper Srx1400	cpe:2.3:h:juniper:srx1400:-
OR
	Running on/with
	Juniper Srx1500	cpe:2.3:h:juniper:srx1500:-
OR
	Running on/with
	Juniper Srx210	cpe:2.3:h:juniper:srx210:-
OR
	Running on/with
	Juniper Srx220	cpe:2.3:h:juniper:srx220:-
OR
	Running on/with
	Juniper Srx240	cpe:2.3:h:juniper:srx240:-
OR
	Running on/with
	Juniper Srx240h2	cpe:2.3:h:juniper:srx240h2:-
OR
	Running on/with
	Juniper Srx240m	cpe:2.3:h:juniper:srx240m:-
OR
	Running on/with
	Juniper Srx300	cpe:2.3:h:juniper:srx300:-
OR
	Running on/with
	Juniper Srx320	cpe:2.3:h:juniper:srx320:-
OR
	Running on/with
	Juniper Srx340	cpe:2.3:h:juniper:srx340:-
OR
	Running on/with
	Juniper Srx3400	cpe:2.3:h:juniper:srx3400:-
OR
	Running on/with
	Juniper Srx345	cpe:2.3:h:juniper:srx345:-
OR
	Running on/with
	Juniper Srx3600	cpe:2.3:h:juniper:srx3600:-
OR
	Running on/with
	Juniper Srx380	cpe:2.3:h:juniper:srx380:-
OR
	Running on/with
	Juniper Srx4000	cpe:2.3:h:juniper:srx4000:-
OR
	Running on/with
	Juniper Srx4100	cpe:2.3:h:juniper:srx4100:-
OR
	Running on/with
	Juniper Srx4200	cpe:2.3:h:juniper:srx4200:-
OR
	Running on/with
	Juniper Srx4600	cpe:2.3:h:juniper:srx4600:-
OR
	Running on/with
	Juniper Srx5000	cpe:2.3:h:juniper:srx5000:-
OR
	Running on/with
	Juniper Srx5400	cpe:2.3:h:juniper:srx5400:-
OR
	Running on/with
	Juniper Srx550	cpe:2.3:h:juniper:srx550:-
OR
	Running on/with
	Juniper Srx550 Hm	cpe:2.3:h:juniper:srx550_hm:-
OR
	Running on/with
	Juniper Srx550m	cpe:2.3:h:juniper:srx550m:-
OR
	Running on/with
	Juniper Srx5600	cpe:2.3:h:juniper:srx5600:-
OR
	Running on/with
	Juniper Srx5800	cpe:2.3:h:juniper:srx5800:-
OR
	Running on/with
	Juniper Srx650	cpe:2.3:h:juniper:srx650:-