USN-5332-1

    Dashboard / Vulnerabilities / USN-5332-1

    USN-5332-1

    Published: 17 Mar 2022Last Modified: 22 Apr 2026

    Summary: bind9 vulnerabilities

    Details: Xiang Li, Baojun Liu, Chaoyi Lu, and Changgen Zou discovered that Bind incorrectly handled certain bogus NS records when using forwarders. A remote attacker could possibly use this issue to manipulate cache results. (CVE-2021-25220) It was discovered that Bind incorrectly handled certain crafted TCP streams. A remote attacker could possibly use this issue to cause Bind to consume resources, leading to a denial of service. This issue only affected Ubuntu 21.10. (CVE-2022-0396)

    References: https://ubuntu.com/security/notices/USN-5332-1, https://ubuntu.com/security/CVE-2021-25220, https://ubuntu.com/security/CVE-2022-0396

    Affected packages

    Package

    Name: bind9

    Purl: pkg:deb/ubuntu/bind9@1:9.11.3+dfsg-1ubuntu1.17?arch=source&distro=bionic

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -1:9.11.3+dfsg-1ubuntu1.17

    Affected versions

    1:9.10.3.dfsg.P4-12.6ubuntu1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    USN-5332-1 | CVE-DB