CVE-2021-25220

DNS forwarders - cache poisoning vulnerability

Medium · published March 23, 2022

CVSS v3.1
6.8
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.03479 · 89.0th percentile
Published
2022-03-23T12:50Z
EPSS history
Timeline
  • 23 MAR 12:50Z
    DNS forwarders - cache poisoning vulnerability
    cvelistv5