p PatchFirst

CVE-2025-40780

CVE-2025-40780 · Cache poisoning due to weak PRNG

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

CVSS 8.6 · High · EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • bind 9

    Versions
    • ≥ 9.16.0, ≤ 9.16.50: Affected (custom)
    • ≥ 9.18.0, ≤ 9.18.39: Affected (custom)
    • ≥ 9.20.0, ≤ 9.20.13: Affected (custom)
    • ≥ 9.21.0, ≤ 9.21.12: Affected (custom)
    • ≥ 9.16.8-S1, ≤ 9.16.50-S1: Affected (custom)
    • ≥ 9.18.11-S1, ≤ 9.18.39-S1: Affected (custom)
    • ≥ 9.20.9-S1, ≤ 9.20.13-S1: Affected (custom)

    No fix published

  • bind9 Debian:12

    Versions
    • 1:9.18.12-1
    • 1:9.18.13-1
    • 1:9.18.16-1
    • 1:9.18.16-1~deb12u1
    • 1:9.18.16-1~deb12u1~bpo11+1
    • 1:9.18.19-1~deb12u1
    • 1:9.18.19-1~deb12u1~bpo11+1
    • 1:9.18.24-1
    • 1:9.18.24-1~bpo11+1
    • 1:9.18.28-1~deb12u1
    • 1:9.18.28-1~deb12u2
    • 1:9.18.33-1~deb12u2
    Affected ranges
    • ECOSYSTEM: < 1:9.18.41-1~deb12u1

    Update to 1:9.18.41-1~deb12u1

  • bind9 Debian:13

    Versions
    • 1:9.20.11-4
    • 1:9.20.15-1~deb13u1~bpo12+1
    Affected ranges
    • ECOSYSTEM: < 1:9.20.15-1~deb13u1

    Update to 1:9.20.15-1~deb13u1

  • bind9 Debian:14

    Versions
    • 1:9.20.11-4
    • 1:9.20.15-1~deb13u1
    • 1:9.20.15-1~deb13u1~bpo12+1
    Affected ranges
    • ECOSYSTEM: < 1:9.20.15-1

    Update to 1:9.20.15-1

  • isc-dhcp Ubuntu:18.04:LTS

    Versions
    • 4.3.5-3ubuntu2
    • 4.3.5-3ubuntu3
    • 4.3.5-3ubuntu4
    • 4.3.5-3ubuntu5
    • 4.3.5-3ubuntu6
    • 4.3.5-3ubuntu7
    • 4.3.5-3ubuntu7.1
    • 4.3.5-3ubuntu7.2
    • 4.3.5-3ubuntu7.3
    • 4.3.5-3ubuntu7.4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • bind9 Ubuntu:Pro:20.04:LTS

    Versions
    • 1:9.11.5.P4+dfsg-5.1ubuntu2
    • 1:9.11.5.P4+dfsg-5.1ubuntu3
    • 1:9.11.5.P4+dfsg-5.1ubuntu4
    • 1:9.11.5.P4+dfsg-5.1ubuntu5
    • 1:9.11.14+dfsg-1ubuntu1
    • 1:9.11.14+dfsg-3ubuntu1
    • 1:9.16.0-1ubuntu3
    • 1:9.16.0-1ubuntu4
    • 1:9.16.0-1ubuntu5
    • 1:9.16.1-0ubuntu1
    • 1:9.16.1-0ubuntu2
    • 1:9.16.1-0ubuntu2.1
    • 1:9.16.1-0ubuntu2.2
    • 1:9.16.1-0ubuntu2.3
    • 1:9.16.1-0ubuntu2.4
    • 1:9.16.1-0ubuntu2.6
    • 1:9.16.1-0ubuntu2.7
    • 1:9.16.1-0ubuntu2.8
    • 1:9.16.1-0ubuntu2.9
    • 1:9.16.1-0ubuntu2.10
    • 1:9.16.1-0ubuntu2.11
    • 1:9.16.1-0ubuntu2.12
    • 1:9.16.1-0ubuntu2.14
    • 1:9.16.1-0ubuntu2.15
    • 1:9.16.1-0ubuntu2.16
    • 1:9.16.48-0ubuntu0.20.04.1
    • 1:9.18.28-0ubuntu0.20.04.1
    • 1:9.18.30-0ubuntu0.20.04.1
    • 1:9.18.30-0ubuntu0.20.04.2
    Affected ranges
    • ECOSYSTEM: < 1:9.18.30-0ubuntu0.20.04.2+esm1

    Update to 1:9.18.30-0ubuntu0.20.04.2+esm1

  • bind9-libs Ubuntu:20.04:LTS

    Versions
    • 1:9.11.16+dfsg-3~build1
    • 1:9.11.16+dfsg-3~ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • bind9 Ubuntu:22.04:LTS

    Versions
    • 1:9.16.15-1ubuntu1
    • 1:9.16.15-1ubuntu2
    • 1:9.16.15-1ubuntu3
    • 1:9.18.0-2ubuntu1
    • 1:9.18.0-2ubuntu2
    • 1:9.18.0-2ubuntu3
    • 1:9.18.1-1ubuntu1
    • 1:9.18.1-1ubuntu1.1
    • 1:9.18.1-1ubuntu1.2
    • 1:9.18.1-1ubuntu1.3
    • 1:9.18.12-0ubuntu0.22.04.1
    • 1:9.18.12-0ubuntu0.22.04.2
    • 1:9.18.12-0ubuntu0.22.04.3
    • 1:9.18.18-0ubuntu0.22.04.1
    • 1:9.18.18-0ubuntu0.22.04.2
    • 1:9.18.24-0ubuntu0.22.04.1
    • 1:9.18.28-0ubuntu0.22.04.1
    • 1:9.18.30-0ubuntu0.22.04.1
    • 1:9.18.30-0ubuntu0.22.04.2
    • 1:9.18.39-0ubuntu0.22.04.1
    Affected ranges
    • ECOSYSTEM: < 1:9.18.39-0ubuntu0.22.04.2

    Update to 1:9.18.39-0ubuntu0.22.04.2

  • bind9-libs Ubuntu:22.04:LTS

    Versions
    • 1:9.11.19+dfsg-2.1ubuntu1
    • 1:9.11.19+dfsg-2.1ubuntu2
    • 1:9.11.19+dfsg-2.1ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • bind9 Ubuntu:24.04:LTS

    Versions
    • 1:9.18.18-0ubuntu2
    • 1:9.18.21-0ubuntu1
    • 1:9.18.24-0ubuntu3
    • 1:9.18.24-0ubuntu4
    • 1:9.18.24-0ubuntu5
    • 1:9.18.28-0ubuntu0.24.04.1
    • 1:9.18.30-0ubuntu0.24.04.1
    • 1:9.18.30-0ubuntu0.24.04.2
    • 1:9.18.39-0ubuntu0.24.04.1
    Affected ranges
    • ECOSYSTEM: < 1:9.18.39-0ubuntu0.24.04.2

    Update to 1:9.18.39-0ubuntu0.24.04.2

  • isc-dhcp Ubuntu:24.04:LTS

    Versions
    • 4.4.3-P1-2ubuntu5
    • 4.4.3-P1-4ubuntu1
    • 4.4.3-P1-4ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • bind9 Ubuntu:25.10

    Versions
    • 1:9.20.4-3ubuntu1
    • 1:9.20.4-3ubuntu2
    • 1:9.20.4-3ubuntu3
    • 1:9.20.9-2ubuntu1
    • 1:9.20.10-1ubuntu1
    • 1:9.20.11-1ubuntu1
    • 1:9.20.11-1ubuntu2
    Affected ranges
    • ECOSYSTEM: < 1:9.20.11-1ubuntu2.1

    Update to 1:9.20.11-1ubuntu2.1

  • isc-dhcp Ubuntu:25.10

    Versions
    • 4.4.3-P1-4ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • bind9 Ubuntu:26.04:LTS

    Versions
    • 1:9.20.11-1ubuntu2
    Affected ranges
    • ECOSYSTEM: < 1:9.20.11-1ubuntu3

    Update to 1:9.20.11-1ubuntu3

  • isc-dhcp Ubuntu:26.04:LTS

    Versions
    • 4.4.3-P1-4ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →