Vulnerability · Published Oct 22, 2025 · Assigned by isc
CVE-2025-40780Cache poisoning due to weak PRNG
High 8.6
In plain English
A high-severity security flaw in BIND 9 from ISC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)8.6High
Exploit odds (30 days)0.5%top 59.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:10 | bind | 32:9.18.33-10.el10_1.2 | ALSA-2025:21034 |
| AlmaLinux:9 | bind | 32:9.16.23-34.el9_7.1 | ALSA-2025:21110 |
| AlmaLinux:10 | bind-chroot | 32:9.18.33-10.el10_1.2 | ALSA-2025:21034 |
| AlmaLinux:9 | bind-chroot | 32:9.16.23-34.el9_7.1 | ALSA-2025:21110 |
| AlmaLinux:10 | bind-devel | 32:9.18.33-10.el10_1.2 | ALSA-2025:21034 |
| AlmaLinux:9 | bind-devel | 32:9.16.23-34.el9_7.1 | ALSA-2025:21110 |
| AlmaLinux:9 | bind-dnssec-doc | 32:9.16.23-34.el9_7.1 | ALSA-2025:21110 |
| AlmaLinux:10 | bind-dnssec-utils | 32:9.18.33-10.el10_1.2 | ALSA-2025:21034 |
| AlmaLinux:9 | bind-dnssec-utils | 32:9.16.23-34.el9_7.1 | ALSA-2025:21110 |
| AlmaLinux:10 | bind-doc | 32:9.18.33-10.el10_1.2 | ALSA-2025:21034 |
| AlmaLinux:10 | bind-doc | 32:9.18.33-4.el10_0.2 | ALSA-2025:19912 |
| AlmaLinux:9 | bind-doc | 32:9.16.23-34.el9_7.1 | ALSA-2025:21110 |
| AlmaLinux:10 | bind-libs | 32:9.18.33-10.el10_1.2 | ALSA-2025:21034 |
| AlmaLinux:9 | bind-libs | 32:9.16.23-34.el9_7.1 | ALSA-2025:21110 |
| AlmaLinux:10 | bind-license | 32:9.18.33-4.el10_0.2 | ALSA-2025:19912 |
| AlmaLinux:10 | bind-license | 32:9.18.33-10.el10_1.2 | ALSA-2025:21034 |
| AlmaLinux:9 | bind-license | 32:9.16.23-34.el9_7.1 | ALSA-2025:21110 |
| AlmaLinux:10 | bind-utils | 32:9.18.33-10.el10_1.2 | ALSA-2025:21034 |
| AlmaLinux:9 | bind-utils | 32:9.16.23-34.el9_7.1 | ALSA-2025:21110 |
| AlmaLinux:8 | bind9.16 | 32:9.16.23-0.22.el8_10.4 | ALSA-2025:19793 |
| AlmaLinux:8 | bind9.16-chroot | 32:9.16.23-0.22.el8_10.4 | ALSA-2025:19793 |
| AlmaLinux:8 | bind9.16-devel | 32:9.16.23-0.22.el8_10.4 | ALSA-2025:19793 |
| AlmaLinux:8 | bind9.16-dnssec-utils | 32:9.16.23-0.22.el8_10.4 | ALSA-2025:19793 |
| AlmaLinux:8 | bind9.16-doc | 32:9.16.23-0.22.el8_10.4 | ALSA-2025:19793 |
| AlmaLinux:8 | bind9.16-libs | 32:9.16.23-0.22.el8_10.4 | ALSA-2025:19793 |
| AlmaLinux:8 | bind9.16-license | 32:9.16.23-0.22.el8_10.4 | ALSA-2025:19793 |
| AlmaLinux:8 | bind9.16-utils | 32:9.16.23-0.22.el8_10.4 | ALSA-2025:19793 |
| AlmaLinux:9 | bind9.18 | 32:9.18.29-5.el9_7.2 | ALSA-2025:21111 |
| AlmaLinux:9 | bind9.18 | 32:9.18.29-4.el9_6.2 | ALSA-2025:19950 |
| AlmaLinux:9 | bind9.18-chroot | 32:9.18.29-5.el9_7.2 | ALSA-2025:21111 |
| AlmaLinux:9 | bind9.18-chroot | 32:9.18.29-4.el9_6.2 | ALSA-2025:19950 |
| AlmaLinux:9 | bind9.18-devel | 32:9.18.29-4.el9_6.2 | ALSA-2025:19950 |
| AlmaLinux:9 | bind9.18-devel | 32:9.18.29-5.el9_7.2 | ALSA-2025:21111 |
| AlmaLinux:9 | bind9.18-dnssec-utils | 32:9.18.29-4.el9_6.2 | ALSA-2025:19950 |
| AlmaLinux:9 | bind9.18-dnssec-utils | 32:9.18.29-5.el9_7.2 | ALSA-2025:21111 |
| AlmaLinux:9 | bind9.18-doc | 32:9.18.29-5.el9_7.2 | ALSA-2025:21111 |
| AlmaLinux:9 | bind9.18-doc | 32:9.18.29-4.el9_6.2 | ALSA-2025:19950 |
| AlmaLinux:9 | bind9.18-libs | 32:9.18.29-4.el9_6.2 | ALSA-2025:19950 |
| AlmaLinux:9 | bind9.18-libs | 32:9.18.29-5.el9_7.2 | ALSA-2025:21111 |
| AlmaLinux:9 | bind9.18-utils | 32:9.18.29-5.el9_7.2 | ALSA-2025:21111 |
| AlmaLinux:9 | bind9.18-utils | 32:9.18.29-4.el9_6.2 | ALSA-2025:19950 |
| AlmaLinux:9 | python3-bind | 32:9.16.23-34.el9_7.1 | ALSA-2025:21110 |
| AlmaLinux:8 | python3-bind9.16 | 32:9.16.23-0.22.el8_10.4 | ALSA-2025:19793 |
| Alpine:v3.20 | bind | 9.18.41-r0 | ALPINE-CVE-2025-40780 |
| Alpine:v3.21 | bind | 9.18.41-r0 | ALPINE-CVE-2025-40780 |
| Alpine:v3.22 | bind | 9.20.15-r0 | ALPINE-CVE-2025-40780 |
| Alpine:v3.23 | bind | 9.20.15-r0 | ALPINE-CVE-2025-40780 |
| Alpine:v3.24 | bind | 9.20.15-r0 | ALPINE-CVE-2025-40780 |
| Debian:12 | bind9 | 1:9.18.41-1~deb12u1 | DEBIAN-CVE-2025-40780 |
| Debian:12 | bind9 | 1:9.18.41-1~deb12u1 | DSA-6033-1 |
| Debian:13 | bind9 | 1:9.20.15-1~deb13u1 | DSA-6033-1 |
| Debian:13 | bind9 | 1:9.20.15-1~deb13u1 | DEBIAN-CVE-2025-40780 |
| Debian:14 | bind9 | 1:9.20.15-1 | DEBIAN-CVE-2025-40780 |
| Rocky Linux:10 | bind | 2:9.18.33-10.el10_1.2 | RLSA-2025:21034 |
| Rocky Linux:9 | bind | 2:9.16.23-34.el9_7.1 | RLSA-2025:21110 |
| Rocky Linux:8 | bind9.16 | 2:9.16.23-0.22.el8_10.4 | RLSA-2025:19793 |
| Rocky Linux:9 | bind9.18 | 2:9.18.29-5.el9_7.2 | RLSA-2025:21111 |
| Ubuntu:22.04:LTS | bind9 | 1:9.18.39-0ubuntu0.22.04.2 | UBUNTU-CVE-2025-40780 |
| Ubuntu:22.04:LTS | bind9 | 1:9.18.39-0ubuntu0.22.04.2 | USN-7836-1 |
| Ubuntu:24.04:LTS | bind9 | 1:9.18.39-0ubuntu0.24.04.2 | USN-7836-1 |
| Ubuntu:24.04:LTS | bind9 | 1:9.18.39-0ubuntu0.24.04.2 | UBUNTU-CVE-2025-40780 |
| Ubuntu:25.10 | bind9 | 1:9.20.11-1ubuntu2.1 | UBUNTU-CVE-2025-40780 |
| Ubuntu:25.10 | bind9 | 1:9.20.11-1ubuntu2.1 | USN-7836-1 |
| Ubuntu:26.04:LTS | bind9 | 1:9.20.11-1ubuntu3 | UBUNTU-CVE-2025-40780 |
| Ubuntu:22.04:LTS | bind9-libs | no fix listed | UBUNTU-CVE-2025-40780 |
| Ubuntu:24.04:LTS | isc-dhcp | no fix listed | UBUNTU-CVE-2025-40780 |
| Ubuntu:25.10 | isc-dhcp | no fix listed | UBUNTU-CVE-2025-40780 |
| Ubuntu:26.04:LTS | isc-dhcp | no fix listed | UBUNTU-CVE-2025-40780 |
Affected products (as reported)
Weakness: CWE-341 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N