CVE:CVE-2021-25219
CNNVD:CNNVD-202110-2018
ISC BIND是美国ISC公司的一套实现了DNS协议的开源软件。
BIND 中存在资源管理错误漏洞，该漏洞源于产品的授权服务器的相应处理存在错误。攻击者可通过该漏洞导致BIND解析器性能下降进而导致查询处理延迟。
solution:Upgrade isc bind to a higher version than 9.11.36,9.16.22,9.17.19,9.9.3:s1,9.9.12:s1,9.9.13:s1,9.10.5:s1,9.10.7:s1,9.11.3:s1,9.11.5:s3,9.11.5:s5,9.11.5:s6,9.11.6:s1,9.11.7:s1,9.11.8:s1,9.11.12:s1,9.11.21:s1,9.11.27:s1,9.11.29:s1,9.11.35:s1,9.16.8:s1,9.16.11:s1,9.16.13:s1,9.16.21:s1,and avoid the version [9.3.0,9.11.36),[9.12.0,9.16.22),[9.17.0,9.17.19),9.9.3:s1,9.9.12:s1,9.9.13:s1,9.10.5:s1,9.10.7:s1,9.11.3:s1,9.11.5:s3,9.11.5:s5,9.11.5:s6,9.11.6:s1,9.11.7:s1,9.11.8:s1,9.11.12:s1,9.11.21:s1,9.11.27:s1,9.11.29:s1,9.11.35:s1,9.16.8:s1,9.16.11:s1,9.16.13:s1,9.16.21:s1; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade fedoraproject fedora to a higher version than 33,34,35,and avoid the version 33,34,35; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp cloud_backup to a higher version than -; Upgrade siemens sinec_infrastructure_network_services to a higher version than 1.0.1.1,and avoid the version (,1.0.1.1); Upgrade oracle http_server to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle zfs_storage_appliance_kit to a higher version than 8.8,and avoid the version 8.8