CVE-2021-25220: Fedoraproject Fedora

Medium severity, CVSS 6.8. EPSS: 3.4% chance of exploitation in the next 30 days.

BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
• ISC BIND: from 9.11.0, before 9.11.37 (fixed in 9.11.37); from 9.11.4, before 9.11.37 (fixed in 9.11.37); from 9.12.0, before 9.16.27 (fixed in 9.16.27); from 9.16.8, before 9.16.27 (fixed in 9.16.27); from 9.17.0, up to and including 9.18.0
• Juniper Junos: before 19.3 (fixed in 19.3); version 19.3 only; version 19.4 only; version 20.2 only; version 20.3 only; version 20.4 only; …
• Netapp h300e Firmware: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500e Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700e Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Siemens Sinec Ins: before 1.0 (fixed in 1.0); version 1.0 only

Published 2022-03-23. Last modified 2026-06-17.