Vulnerabilities > CVE-2021-25214 - Reachable Assertion vulnerability in multiple products

In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a malformed IXFR triggering the flaw described above, the named process will terminate due to a failed assertion the next time the transferred secondary zone is refreshed.

Vulnerable Configurations

Part	Description	Count
Application	Isc ISC Bind 9.11.7 ISC Bind 9.11.3 ISC Bind 9.11.6 ISC Bind 9.10.5 ISC Bind 9.11.5 ISC Bind 9.9.3 ISC Bind 9.10.7 ISC Bind 9.11.12 ISC Bind 9.11.8 ISC Bind 9.9.12 ISC Bind 9.9.13 ISC Bind 9.11.21 ISC Bind 9.16.8 ISC Bind 9.16.11 ISC Bind 9.11.27 ISC Bind 9.16.13 ISC Bind 9.11.29 ISC Bind 9.8.5 ISC Bind 9.8.6 ISC Bind 9.8.7 ISC Bind 9.8.8 ISC Bind 9.12.0 ISC Bind 9.16.0 ISC Bind 9.16.12 ISC Bind 9.17.0 ISC Bind 9.17.11	49
Application	Siemens Siemens Sinec Infrastructure Network Services - Siemens Sinec Infrastructure Network Services 1.0.1	2
Application	Netapp Netapp Cloud Backup - Netapp Active IQ Unified Manager -	2
OS	Debian Debian Debian Linux 9.0 Debian Debian Linux 10.0	2
OS	Fedoraproject Fedoraproject Fedora 33 Fedoraproject Fedora 34	2
OS	Netapp Netapp AFF A250 Firmware - Netapp AFF 500F Firmware - Netapp H300S Firmware - Netapp H500S Firmware - Netapp H700S Firmware - Netapp H300E Firmware - Netapp H500E Firmware - Netapp H700E Firmware - Netapp H410S Firmware -	9
Hardware	Netapp Netapp AFF A250 - Netapp AFF 500F - Netapp H300S - Netapp H500S - Netapp H700S - Netapp H300E - Netapp H500E - Netapp H700E - Netapp H410S -	9

Common Weakness Enumeration (CWE)

CWE-617 - Reachable Assertion

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References