VULN/vuln-ubuntu
1
0 Fork 0
Code Pull Requests Actions Activity
Files
b11ea68500bc027250f00a6270f6fc7f2eb21e6e
vuln-ubuntu/data/osv/usn/USN-5332-1.json
T

263 lines
7.6 KiB
JSON
Raw Blame History

{
"schema_version": "1.7.0",
"id": "USN-5332-1",
"summary": "bind9 vulnerabilities",
"details": "Xiang Li, Baojun Liu, Chaoyi Lu, and Changgen Zou discovered that Bind\nincorrectly handled certain bogus NS records when using forwarders. A\nremote attacker could possibly use this issue to manipulate cache results.\n(CVE-2021-25220)\n\nIt was discovered that Bind incorrectly handled certain crafted TCP\nstreams. A remote attacker could possibly use this issue to cause Bind to\nconsume resources, leading to a denial of service. This issue only affected\nUbuntu 21.10. (CVE-2022-0396)\n",
"aliases": [],
"upstream": [
"UBUNTU-CVE-2021-25220",
"UBUNTU-CVE-2022-0396"
],
"related": [],
"published": "2022-03-17T11:19:29Z",
"modified": "2026-04-22T07:37:01Z",
"affected": [
{
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "bind9",
"purl": "pkg:deb/ubuntu/bind9@1:9.11.3+dfsg-1ubuntu1.17?arch=source&distro=bionic"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:9.11.3+dfsg-1ubuntu1.17"
}
]
}
],
"versions": [
"1:9.10.3.dfsg.P4-12.6ubuntu1",
"1:9.11.2.P1-1ubuntu2",
"1:9.11.2.P1-1ubuntu3",
"1:9.11.2.P1-1ubuntu4",
"1:9.11.2.P1-1ubuntu5",
"1:9.11.3+dfsg-1ubuntu1",
"1:9.11.3+dfsg-1ubuntu1.1",
"1:9.11.3+dfsg-1ubuntu1.2",
"1:9.11.3+dfsg-1ubuntu1.3",
"1:9.11.3+dfsg-1ubuntu1.5",
"1:9.11.3+dfsg-1ubuntu1.7",
"1:9.11.3+dfsg-1ubuntu1.8",
"1:9.11.3+dfsg-1ubuntu1.9",
"1:9.11.3+dfsg-1ubuntu1.10",
"1:9.11.3+dfsg-1ubuntu1.11",
"1:9.11.3+dfsg-1ubuntu1.12",
"1:9.11.3+dfsg-1ubuntu1.13",
"1:9.11.3+dfsg-1ubuntu1.14",
"1:9.11.3+dfsg-1ubuntu1.15",
"1:9.11.3+dfsg-1ubuntu1.16"
],
"ecosystem_specific": {
"binaries": [
{
"binary_name": "bind9",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.17"
},
{
"binary_name": "bind9-host",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.17"
},
{
"binary_name": "bind9utils",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.17"
},
{
"binary_name": "dnsutils",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.17"
},
{
"binary_name": "libbind9-160",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.17"
},
{
"binary_name": "libdns-export1100",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.17"
},
{
"binary_name": "libdns1100",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.17"
},
{
"binary_name": "libirs-export160",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.17"
},
{
"binary_name": "libirs160",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.17"
},
{
"binary_name": "libisc-export169",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.17"
},
{
"binary_name": "libisc169",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.17"
},
{
"binary_name": "libisccc-export160",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.17"
},
{
"binary_name": "libisccc160",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.17"
},
{
"binary_name": "libisccfg-export160",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.17"
},
{
"binary_name": "libisccfg160",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.17"
},
{
"binary_name": "liblwres160",
"binary_version": "1:9.11.3+dfsg-1ubuntu1.17"
}
],
"availability": "No subscription required"
},
"database_specific": {
"cves_map": {
"ecosystem": "Ubuntu:18.04:LTS",
"cves": [
{
"id": "CVE-2021-25220",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
]
}
}
},
{
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "bind9",
"purl": "pkg:deb/ubuntu/bind9@1:9.16.1-0ubuntu2.10?arch=source&distro=focal"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:9.16.1-0ubuntu2.10"
}
]
}
],
"versions": [
"1:9.11.5.P4+dfsg-5.1ubuntu2",
"1:9.11.5.P4+dfsg-5.1ubuntu3",
"1:9.11.5.P4+dfsg-5.1ubuntu4",
"1:9.11.5.P4+dfsg-5.1ubuntu5",
"1:9.11.14+dfsg-1ubuntu1",
"1:9.11.14+dfsg-3ubuntu1",
"1:9.16.0-1ubuntu3",
"1:9.16.0-1ubuntu4",
"1:9.16.0-1ubuntu5",
"1:9.16.1-0ubuntu1",
"1:9.16.1-0ubuntu2",
"1:9.16.1-0ubuntu2.1",
"1:9.16.1-0ubuntu2.2",
"1:9.16.1-0ubuntu2.3",
"1:9.16.1-0ubuntu2.4",
"1:9.16.1-0ubuntu2.6",
"1:9.16.1-0ubuntu2.7",
"1:9.16.1-0ubuntu2.8",
"1:9.16.1-0ubuntu2.9"
],
"ecosystem_specific": {
"binaries": [
{
"binary_name": "bind9",
"binary_version": "1:9.16.1-0ubuntu2.10"
},
{
"binary_name": "bind9-dnsutils",
"binary_version": "1:9.16.1-0ubuntu2.10"
},
{
"binary_name": "bind9-host",
"binary_version": "1:9.16.1-0ubuntu2.10"
},
{
"binary_name": "bind9-libs",
"binary_version": "1:9.16.1-0ubuntu2.10"
},
{
"binary_name": "bind9-utils",
"binary_version": "1:9.16.1-0ubuntu2.10"
},
{
"binary_name": "bind9utils",
"binary_version": "1:9.16.1-0ubuntu2.10"
},
{
"binary_name": "dnsutils",
"binary_version": "1:9.16.1-0ubuntu2.10"
}
],
"availability": "No subscription required"
},
"database_specific": {
"cves_map": {
"ecosystem": "Ubuntu:20.04:LTS",
"cves": [
{
"id": "CVE-2021-25220",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
]
}
}
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-5332-1"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2021-25220"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2022-0396"
}
]
}
View Git Blame Copy Permalink