ALPINE-CVE-2025-40780
ALPINE-CVE-2025-40780
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.
CVSS 8.6 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
bind Alpine:v3.19
- Affected ranges
- ECOSYSTEM: < 9.18.41-r0
Update to 9.18.41-r0
bind Alpine:v3.20
- Affected ranges
- ECOSYSTEM: < 9.18.41-r0
Update to 9.18.41-r0
bind Alpine:v3.21
- Affected ranges
- ECOSYSTEM: < 9.18.41-r0
Update to 9.18.41-r0
bind Alpine:v3.22
- Affected ranges
- ECOSYSTEM: < 9.20.15-r0
Update to 9.20.15-r0
bind Alpine:v3.23
- Affected ranges
- ECOSYSTEM: < 9.20.15-r0
Update to 9.20.15-r0
bind Alpine:v3.24
- Affected ranges
- ECOSYSTEM: < 9.20.15-r0
Update to 9.20.15-r0