ALPINE-CVE-2025-40778
ALPINE-CVE-2025-40778
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.
CVSS 8.6 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
bind Alpine:v3.19
- Affected ranges
- ECOSYSTEM: < 9.18.41-r0
Update to 9.18.41-r0
bind Alpine:v3.20
- Affected ranges
- ECOSYSTEM: < 9.18.41-r0
Update to 9.18.41-r0
bind Alpine:v3.21
- Affected ranges
- ECOSYSTEM: < 9.18.41-r0
Update to 9.18.41-r0
bind Alpine:v3.22
- Affected ranges
- ECOSYSTEM: < 9.20.15-r0
Update to 9.20.15-r0
bind Alpine:v3.23
- Affected ranges
- ECOSYSTEM: < 9.20.15-r0
Update to 9.20.15-r0
bind Alpine:v3.24
- Affected ranges
- ECOSYSTEM: < 9.20.15-r0
Update to 9.20.15-r0