Aller au contenu
en Se connecter
8.6 Élevée

CVE-2025-40780 In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible…

Description

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Produits et versions touchés

Produit Versions touchées Corrigé en
BIND 9 9.21 9.21.0 → 9.21.12 Pas de correctif indiqué
BIND 9 9.20 9.20.0 → 9.20.13 Pas de correctif indiqué
BIND 9 9.18 9.18.0 → 9.18.39 Pas de correctif indiqué
BIND 9 9.16 9.16.0 → 9.16.50 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de BIND 9

Les 87 CVE de BIND 9 →
CVE-2026-97313 A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may… 7.5 Élevée CVE-2026-96888 A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an… 7.5 Élevée CVE-2026-94300 Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`" 8.1 Élevée CVE-2026-19630 In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with… 7.5 Élevée
Suivre cette CVE