CVE-2025-40778

Published: Oct 22, 2025Modified: Jun 17, 2026Deferred

8.6

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 4.0

Source: security-officer@isc.org (Secondary)

Description

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Related CWEs

CWE-349

Acceptance of Extraneous Untrusted Data With Trusted Data

The product, when processing trusted data, accepts any untrusted data that is also included with the trusted data, treating the untrusted data as if it were trusted.

References (3)

https://kb.isc.org/docs/cve-2025-40778

Source: security-officer@isc.org

http://www.openwall.com/lists/oss-security/2025/10/22/1

Source: af854a3a-2127-422b-91ae-364da2661108

https://gist.github.com/N3mes1s/f76b4a606308937b0806a5256bc1f918

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.