CVE-2025-40778 — Cache poisoning attacks with unsolicited RRs

Description (CNA)

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Affected (CNA)

Vendor / product	Versions
ISC / BIND 9	affected 9.11.0 through 9.16.50; affected 9.18.0 through 9.18.39; affected 9.20.0 through 9.20.13; affected 9.21.0 through 9.21.12; affected 9.11.3-S1 through 9.16.50-S1; affected 9.18.11-S1 through 9.18.39-S1; affected 9.20.9-S1 through 9.20.13-S1

CWE

CWE-349

References

https://kb.isc.org/docs/cve-2025-40778

ADP enrichment

CISA-ADP

No English description supplied.

https://gist.github.com/N3mes1s/f76b4a606308937b0806a5256bc1f918

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2025/10/22/1