Security Alert (A21-08-12): Vulnerability in ISC BIND

Description:

ISC has released a security update to fix a vulnerability in BIND. This vulnerability only affects BIND 9 releases 9.16.19, 9.17.16, and release 9.16.19-S1 of the BIND Supported Preview Edition. The details of the security update can be found at:

https://kb.isc.org/v1/docs/cve-2021-25218

Affected Systems:

• BIND 9.16.19
• BIND 9.17.16
• BIND 9.16.19-S1

Impact:

Successful exploitation of the vulnerability could lead to denial of service on an affected system.

Recommendation:

Internet Systems Consortium (ISC) has released the following patches to solve the problems:

• BIND 9.16.20
• BIND 9.17.17
• BIND 9.16.20-S1

The patches can be downloaded at the following URLs:

https://www.isc.org/download/

Administrators of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

More Information:

• https://kb.isc.org/v1/docs/cve-2021-25218
• https://downloads.isc.org/isc/bind9/9.16.20/RELEASE-NOTES-bind-9.16.20.html
• https://downloads.isc.org/isc/bind9/9.17.17/RELEASE-NOTES-bind-9.17.17.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25218