Skip to content
Sign in
8.6 High

CVE-2025-40778 Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject…

Description

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Affected products and versions

Product Affected versions Fixed in
BIND 9 9.21 9.21.0 → 9.21.12 No fix stated
BIND 9 9.20 9.20.0 → 9.20.13 No fix stated
BIND 9 9.18 9.18.0 → 9.18.39 No fix stated
BIND 9 9.11 9.11.0 → 9.16.50 No fix stated

Other CVEs of BIND 9

The 87 CVEs of BIND 9 →
CVE-2026-97313 A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may… 7.5 High CVE-2026-96888 A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an… 7.5 High CVE-2026-94300 Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`" 8.1 High CVE-2026-19630 In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with… 7.5 High
Track this CVE