CVE-2021-25215

Related Vulnerabilities: CVE-2021-25215  

A flaw was found in bind. The way DNAME records are processed may trigger the same RRset to the ANSWER section to be added more than once which causes an assertion check to fail. The highest threat from this flaw is to system availability.

Description

A flaw was found in bind. The way DNAME records are processed may trigger the same RRset to the ANSWER section to be added more than once which causes an assertion check to fail. The highest threat from this flaw is to system availability.

Additional Information

  • Bugzilla 1953857: CVE-2021-25215 bind: An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself
  • CWE-617: Reachable Assertion
  • FAQ: Frequently asked questions about CVE-2021-25215