Aller au contenu
en Se connecter
8.6 Élevée

CVE-2025-40778 Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject…

Description

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Produits et versions touchés

Produit Versions touchées Corrigé en
BIND 9 9.21 9.21.0 → 9.21.12 Pas de correctif indiqué
BIND 9 9.20 9.20.0 → 9.20.13 Pas de correctif indiqué
BIND 9 9.18 9.18.0 → 9.18.39 Pas de correctif indiqué
BIND 9 9.11 9.11.0 → 9.16.50 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de BIND 9

Les 87 CVE de BIND 9 →
CVE-2026-97313 A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may… 7.5 Élevée CVE-2026-96888 A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an… 7.5 Élevée CVE-2026-94300 Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`" 8.1 Élevée CVE-2026-19630 In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with… 7.5 Élevée
Suivre cette CVE