CVE-2025-40776 — Birthday Attack against Resolvers supporting ECS

CVE-2025-40776

Birthday Attack against Resolvers supporting ECS PUBLISHED

Description (CNA)

A `named` caching resolver that is configured to send ECS (EDNS Client Subnet) options may be vulnerable to a cache-poisoning attack. This issue affects BIND 9 versions 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.37-S1, and 9.20.9-S1 through 9.20.10-S1.

Affected (CNA)

Vendor / product	Versions
ISC / BIND 9	affected 9.11.3-S1 through 9.16.50-S1; affected 9.18.11-S1 through 9.18.37-S1; affected 9.20.9-S1 through 9.20.10-S1; unaffected 9.0.0 through 9.20.10

CWE

CWE-349

References

https://kb.isc.org/docs/cve-2025-40776

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.