Every CVE Search/ Get API key

CVE-2025-40780

Cache poisoning due to weak PRNG

8.6 HighFix available

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

0.47%Up 0.5 points since Oct 23, 2025
90%50%10%1%

What each source reports

CVE List Score used 8.6

Cache poisoning due to weak PRNG

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
CVE-2025-40780
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Weakness
CWE-341
Updated
2026-11-02
EUVDEUVD-2025-35609 8.6

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
EUVD-2025-35609
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-j3w4-m6qj-vmm5 8.6

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is...

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
GHSA-j3w4-m6qj-vmm5
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Weakness
CWE-341
Updated
2026-11-02
NVD 8.6

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
CVE-2025-40780
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Weakness
CWE-341
Updated
2026-11-02
OSVALPINE-CVE-2025-40780 8.6

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
ALPINE-CVE-2025-40780
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVBELL-CVE-2025-40780 8.6
Record
BELL-CVE-2025-40780
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
Show 45 moreShow less
OSVDEBIAN-CVE-2025-40780 8.6

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
DEBIAN-CVE-2025-40780
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2653 8.6

bind security update

Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.

Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40780)

Record
OESA-2025-2653
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2654 8.6

bind security update

Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.

Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40780)

Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-8677)

Record
OESA-2025-2654
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2716 8.6

bind security update

Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.

Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40780)

Record
OESA-2025-2716
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2717 8.6

bind security update

Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.

Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40780)

Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-8677)

Record
OESA-2025-2717
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2718 8.6

bind security update

Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.

Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40780)

Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-8677)

Record
OESA-2025-2718
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:19793 8.6

Red Hat Security Advisory: bind9.16 security update

Record
RHSA-2025:19793
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:19912 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:19912
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:19950 8.6

Red Hat Security Advisory: bind9.18 security update

Record
RHSA-2025:19950
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:19951 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:19951
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21034 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:21034
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21110 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:21110
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21111 8.6

Red Hat Security Advisory: bind9.18 security update

Record
RHSA-2025:21111
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21817 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:21817
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21887 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:21887
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21889 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:21889
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21939 8.6

Red Hat Security Advisory: bind9.16 security update

Record
RHSA-2025:21939
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:22168 8.6

Red Hat Security Advisory: bind9.16 security update

Record
RHSA-2025:22168
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:6935 8.6

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:6935
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2025:19793 8.6

Important: bind9.16 security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)

  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:19793
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2025:21034 8.6

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)

  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

  • bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:21034
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2025:21110 8.6

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)

  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:21110
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2025:21111 8.6

Important: bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)

  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

  • bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:21111
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2025-40780 8.6

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
UBUNTU-CVE-2025-40780
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVALSA-2025:19793 No score

Important: bind9.16 security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:19793
Updated
2026-11-02
OSVALSA-2025:19912 No score

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)
  • bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:19912
Updated
2026-11-02
OSVALSA-2025:19950 No score

Important: bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)
  • bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:19950
Updated
2026-11-02
OSVALSA-2025:21034 No score

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)
  • bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:21034
Updated
2026-11-02
OSVALSA-2025:21110 No score

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:21110
Updated
2026-11-02
OSVALSA-2025:21111 No score

Important: bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)
  • bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:21111
Updated
2026-11-02
OSVAZL-68730 No score

CVE-2025-40780 affecting package bind for versions less than 9.16.50-3

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
AZL-68730
Updated
2026-11-02
OSVAZL-68739 No score

CVE-2025-40780 affecting package bind for versions less than 9.20.15-1

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
AZL-68739
Updated
2026-11-02
OSVCLSA-2025-1764084458 No score

bind: Fix of 2 CVEs

  • CVE-2025-40780: fix randomness sources, drop obsolete PRNG test
  • CVE-2025-40778: fix NS caching, DNAME/referral handling, restore IPv6 TCP tests
Record
CLSA-2025-1764084458
Updated
2026-11-02
OSVMGASA-2025-0254 No score

Updated bind packages fix security vulnerabilities

Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677). Cache poisoning attacks with unsolicited RRs (CVE-2025-40778). Cache poisoning due to weak PRNG (CVE-2025-40780).

Record
MGASA-2025-0254
Updated
2026-11-02
OSVopenSUSE-SU-2025:15659-1 No score

bind-9.20.15-1.1 on GA media

These are all security issues fixed in the bind-9.20.15-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15659-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20039-1 No score

Security update for bind

This update for bind fixes the following issues:

  • Upgrade to release 9.20.15 Security Fixes:

    • CVE-2025-40778: Fixed cache poisoning attacks with unsolicited RRs (bsc#1252379)
    • CVE-2025-40780: Fixed cache poisoning due to weak PRNG (bsc#1252380)
    • CVE-2025-8677: Fixed resource exhaustion via malformed DNSKEY handling (bsc#1252378)

    New Features:

    • Add dnssec-policy keys configuration check to named-checkconf.
    • Add a new option manual-mode to dnssec-policy.
    • Add a new option servfail-until-ready to response-policy zones.
    • Support for parsing HHIT and BRID records has been added.
    • Support for parsing DSYNC records has been added.

    Removed Features:

    • Deprecate the tkey-gssapi-credential statement.
    • Obsolete the tkey-domain statement.

    Feature Changes:

    • Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS digest type 1.

    Bug Fixes:

    • Missing DNSSEC information when CD bit is set in query.
    • rndc sign during ZSK rollover will now replace signatures.
    • Use signer name when disabling DNSSEC algorithms.
    • Preserve cache when reload fails and reload the server again.
    • Prevent spurious SERVFAILs for certain 0-TTL resource records.
    • Fix unexpected termination if catalog-zones had undefined default-primaries.
    • Stale RRsets in a CNAME chain were not always refreshed.
    • Add RPZ extended DNS error for zones with a CNAME override policy configured.
    • Fix dig +keepopen option.
    • Log dropped or slipped responses in the query-errors category.
    • Fix synth-from-dnssec not working in some scenarios.
    • Clean enough memory when adding new ADB names/entries under memory pressure.
    • Prevent spurious validation failures.
    • Ensure file descriptors 0-2 are in use before using libuv [bsc#1230649]
Record
openSUSE-SU-2026:20039-1
Updated
2026-11-02
OSVSUSE-SU-2025:3903-1 No score

Security update for bind

This update for bind fixes the following issues:

Upgrade to release 9.20.15:

  • CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found (bsc#1252378).
  • CVE-2025-40778: Address various spoofing attacks (bsc#1252379).
  • CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).
Record
SUSE-SU-2025:3903-1
Updated
2026-11-02
OSVSUSE-SU-2025:4107-1 No score

Security update for bind

This update for bind fixes the following issues:

  • CVE-2025-40778: Address various spoofing attacks (bsc#1252379).
  • CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).
Record
SUSE-SU-2025:4107-1
Updated
2026-11-02
OSVSUSE-SU-2025:4108-1 No score

Security update for bind

This update for bind fixes the following issues:

  • CVE-2025-40778: Address various spoofing attacks (bsc#1252379).
  • CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).
Record
SUSE-SU-2025:4108-1
Updated
2026-11-02
OSVSUSE-SU-2025:4109-1 No score

Security update for bind

This update for bind fixes the following issues:

  • CVE-2025-40778: Address various spoofing attacks (bsc#1252379).
  • CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).
Record
SUSE-SU-2025:4109-1
Updated
2026-11-02
OSVSUSE-SU-2025:4110-1 No score

Security update for bind

This update for bind fixes the following issues:

  • CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found (bsc#1252378).
  • CVE-2025-40778: Address various spoofing attacks (bsc#1252379).
  • CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).
Record
SUSE-SU-2025:4110-1
Updated
2026-11-02
OSVSUSE-SU-2025:4222-1 No score

Security update for bind

This update for bind fixes the following issues:

  • CVE-2025-40778: Address various spoofing attacks (bsc#1252379).
  • CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).
Record
SUSE-SU-2025:4222-1
Updated
2026-11-02
OSVSUSE-SU-2026:20085-1 No score

Security update for bind

This update for bind fixes the following issues:

  • Upgrade to release 9.20.15 Security Fixes:

    • CVE-2025-40778: Fixed cache poisoning attacks with unsolicited RRs (bsc#1252379)
    • CVE-2025-40780: Fixed cache poisoning due to weak PRNG (bsc#1252380)
    • CVE-2025-8677: Fixed resource exhaustion via malformed DNSKEY handling (bsc#1252378)

    New Features:

    • Add dnssec-policy keys configuration check to named-checkconf.
    • Add a new option manual-mode to dnssec-policy.
    • Add a new option servfail-until-ready to response-policy zones.
    • Support for parsing HHIT and BRID records has been added.
    • Support for parsing DSYNC records has been added.

    Removed Features:

    • Deprecate the tkey-gssapi-credential statement.
    • Obsolete the tkey-domain statement.

    Feature Changes:

    • Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS digest type 1.

    Bug Fixes:

    • Missing DNSSEC information when CD bit is set in query.
    • rndc sign during ZSK rollover will now replace signatures.
    • Use signer name when disabling DNSSEC algorithms.
    • Preserve cache when reload fails and reload the server again.
    • Prevent spurious SERVFAILs for certain 0-TTL resource records.
    • Fix unexpected termination if catalog-zones had undefined default-primaries.
    • Stale RRsets in a CNAME chain were not always refreshed.
    • Add RPZ extended DNS error for zones with a CNAME override policy configured.
    • Fix dig +keepopen option.
    • Log dropped or slipped responses in the query-errors category.
    • Fix synth-from-dnssec not working in some scenarios.
    • Clean enough memory when adding new ADB names/entries under memory pressure.
    • Prevent spurious validation failures.
    • Ensure file descriptors 0-2 are in use before using libuv [bsc#1230649]
Record
SUSE-SU-2026:20085-1
Updated
2026-11-02
OSVUSN-7836-1 No score

bind9 vulnerabilities

Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain malformed DNSKEY records. A remote attacker could possibly use this issue to cause Bind to consume resources, resulting in a denial of service. (CVE-2025-8677)

Yuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan discovered that Bind incorrectly accepted certain records from answers. A remote attacker could possibly use this issue to perform a cache poisoning attack. (CVE-2025-40778)

Amit Klein and Omer Ben Simhon discovered that Bind used a weak PRNG. A remote attacker could possibly use this issue to perform a cache poisoning attack. (CVE-2025-40780)

Record
USN-7836-1
Updated
2026-11-02
OSVUSN-7836-2 No score

bind9 vulnerabilities

USN-7836-1 fixed vulnerabilities in Bind. This update provides the corresponding fixes for Ubuntu 20.04 LTS.

Original advisory details:

Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain malformed DNSKEY records. A remote attacker could possibly use this issue to cause Bind to consume resources, resulting in a denial of service. (CVE-2025-8677)

Yuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan discovered that Bind incorrectly accepted certain records from answers. A remote attacker could possibly use this issue to perform a cache poisoning attack. (CVE-2025-40778)

Amit Klein and Omer Ben Simhon discovered that Bind used a weak PRNG. A remote attacker could possibly use this issue to perform a cache poisoning attack. (CVE-2025-40780)

Record
USN-7836-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bind
Alpine:v3.19
 before 9.18.41-r0
9.18.41-r0
bind
Alpine:v3.20
 before 9.18.41-r0
9.18.41-r0
bind
Alpine:v3.21
 before 9.18.41-r0
9.18.41-r0
bind
Alpine:v3.22
 before 9.20.15-r0
9.20.15-r0
bind
Alpine:v3.23
 before 9.20.15-r0
9.20.15-r0
bind
Alpine:v3.24
 before 9.20.15-r0
9.20.15-r0
bind9.16
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-chroot
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-dnssec-utils
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
Show 290 moreShow less
Affected packages
PackageAffectedFixed
bind9.16-doc
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-license
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-utils
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
python3-bind9.16
AlmaLinux:8
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind-doc
AlmaLinux:10
From an advisory covering 3 CVEs
 before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-license
AlmaLinux:10
From an advisory covering 3 CVEs
 before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind9.18
AlmaLinux:9
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-chroot
AlmaLinux:9
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-devel
AlmaLinux:9
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-dnssec-utils
AlmaLinux:9
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-doc
AlmaLinux:9
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-libs
AlmaLinux:9
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-utils
AlmaLinux:9
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind
AlmaLinux:10
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-chroot
AlmaLinux:10
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-devel
AlmaLinux:10
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-dnssec-utils
AlmaLinux:10
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-doc
AlmaLinux:10
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-libs
AlmaLinux:10
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-license
AlmaLinux:10
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-utils
AlmaLinux:10
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-chroot
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-dnssec-doc
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-dnssec-utils
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-doc
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-libs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-license
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-utils
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
python3-bind
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind9.18
AlmaLinux:9
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-chroot
AlmaLinux:9
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-devel
AlmaLinux:9
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-dnssec-utils
AlmaLinux:9
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-doc
AlmaLinux:9
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-libs
AlmaLinux:9
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-utils
AlmaLinux:9
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind
Azure Linux:2
 before 9.16.50-3
9.16.50-3
bind
Azure Linux:3
 before 9.20.15-1
9.20.15-1
bind
Alpaquita:23
 9.18.11-r0 up to 9.18.41-r0
9.18.41-r0
bind
Alpaquita:25
 9.20.9-r0 up to 9.20.15-r0
9.20.15-r0
bind
Alpaquita:stream
 9.18.16-r0 up to 9.20.15-r0
9.20.15-r0
bind
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind-chroot
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind-dnssec-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind-dnssec-utils
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind-license
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind-utils
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
python3-bind
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind9
Debian:12
 before 1:9.18.41-1~deb12u1, plus listed versions
1:9.18.12-11:9.18.13-11:9.18.16-11:9.18.16-1~deb12u11:9.18.16-1~deb12u1~bpo11+1
Show 7 moreShow less
1:9.18.19-1~deb12u11:9.18.19-1~deb12u1~bpo11+11:9.18.24-11:9.18.24-1~bpo11+11:9.18.28-1~deb12u11:9.18.28-1~deb12u21:9.18.33-1~deb12u2
1:9.18.41-1~deb12u1
bind9
Debian:13
 before 1:9.20.15-1~deb13u1, plus listed versions
1:9.20.11-41:9.20.15-1~deb13u1~bpo12+1
1:9.20.15-1~deb13u1
bind9
Debian:14
 before 1:9.20.15-1, plus listed versions
1:9.20.11-41:9.20.15-1~deb13u11:9.20.15-1~deb13u1~bpo12+1
1:9.20.15-1
bind9
Debian:11
From an advisory covering 3 CVEs
 before 1:9.16.50-1~deb11u4, plus listed versions
1:9.16.15-11:9.16.21-11:9.16.21-1+hurd.11:9.16.22-1~deb11u11:9.16.22-1~deb11u1~bpo10+1
Show 10 moreShow less
1:9.16.27-1~deb11u11:9.16.27-1~deb11u1~bpo10+11:9.16.33-1~deb11u11:9.16.37-1~deb11u11:9.16.42-1~deb11u11:9.16.44-1~deb11u11:9.16.48-11:9.16.50-1~deb11u11:9.16.50-1~deb11u21:9.16.50-1~deb11u3
1:9.16.50-1~deb11u4
bind9
Debian:12
From an advisory covering 3 CVEs
 before 1:9.18.41-1~deb12u1, plus listed versions
1:9.18.12-11:9.18.13-11:9.18.16-11:9.18.16-1~deb12u11:9.18.16-1~deb12u1~bpo11+1
Show 7 moreShow less
1:9.18.19-1~deb12u11:9.18.19-1~deb12u1~bpo11+11:9.18.24-11:9.18.24-1~bpo11+11:9.18.28-1~deb12u11:9.18.28-1~deb12u21:9.18.33-1~deb12u2
1:9.18.41-1~deb12u1
bind9
Debian:13
From an advisory covering 3 CVEs
 before 1:9.20.15-1~deb13u1, plus listed versions
1:9.20.11-41:9.20.15-1~deb13u1~bpo12+1
1:9.20.15-1~deb13u1
bind
Mageia:9
From an advisory covering 3 CVEs
 before 9.18.39-1.1.mga9
9.18.39-1.1.mga9
bind
openEuler:22.03-LTS-SP3
From an advisory covering 2 CVEs
 before 9.16.23-28.oe2203sp3
9.16.23-28.oe2203sp3
bind
openEuler:24.03-LTS-SP1
From an advisory covering 3 CVEs
 before 9.18.21-5.oe2403sp1
9.18.21-5.oe2403sp1
bind
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 9.16.23-28.oe2203sp4
9.16.23-28.oe2203sp4
bind
openEuler:24.03-LTS
From an advisory covering 3 CVEs
 before 9.18.21-5.oe2403
9.18.21-5.oe2403
bind
openEuler:24.03-LTS-SP2
From an advisory covering 3 CVEs
 before 9.18.21-5.oe2403sp2
9.18.21-5.oe2403sp2
bind9.16
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-chroot
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-dnssec-utils
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-dnssec-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-license
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-utils
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
python3-bind9.16
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-dnssec-utils-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-doc
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-libs
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-libs-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-utils-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-chroot
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-debugsource
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-dnssec-utils
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-dnssec-utils-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-libs
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-libs-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-license
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-utils
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-utils-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-devel
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-doc
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
 before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind9.18
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-chroot
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-dnssec-utils
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-dnssec-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-utils
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-dnssec-utils-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-doc
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-libs
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-utils-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-chroot
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-dnssec-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-dnssec-utils
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-dnssec-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-license
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-utils
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
python3-bind
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-dnssec-utils-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-doc
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-libs
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind-utils-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-31.el9_6.2
32:9.16.23-31.el9_6.2
bind
Red Hat:enterprise_linux:10.1
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-chroot
Red Hat:enterprise_linux:10.1
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-debugsource
Red Hat:enterprise_linux:10.1
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-dnssec-utils
Red Hat:enterprise_linux:10.1
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-dnssec-utils-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-libs
Red Hat:enterprise_linux:10.1
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-libs-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-license
Red Hat:enterprise_linux:10.1
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-utils
Red Hat:enterprise_linux:10.1
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-utils-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-doc
Red Hat:enterprise_linux:10.1
From an advisory covering 3 CVEs
 before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-chroot
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-dnssec-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-dnssec-utils
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-dnssec-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-license
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-utils
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
python3-bind
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-dnssec-utils-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-doc
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-libs
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-utils-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind9.18
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-chroot
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-dnssec-utils
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-dnssec-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-utils
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-dnssec-utils-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-doc
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-libs
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-utils-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-chroot
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-debugsource
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-dnssec-doc
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-dnssec-utils
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-dnssec-utils-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-libs
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-libs-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-license
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-utils
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-utils-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
python3-bind
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-debugsource
Red Hat:rhel_eus:9.4::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-devel
Red Hat:rhel_eus:9.4::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-dnssec-utils-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-doc
Red Hat:rhel_eus:9.4::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-libs
Red Hat:rhel_eus:9.4::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-libs-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind-utils-debuginfo
Red Hat:rhel_eus:9.4::crb
From an advisory covering 2 CVEs
 before 32:9.16.23-18.el9_4.10
32:9.16.23-18.el9_4.10
bind
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.9
32:9.16.23-11.el9_2.9
bind-chroot
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.9
32:9.16.23-11.el9_2.9
bind-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.9
32:9.16.23-11.el9_2.9
bind-debugsource
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.9
32:9.16.23-11.el9_2.9
bind-dnssec-doc
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.9
32:9.16.23-11.el9_2.9
bind-dnssec-utils
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.9
32:9.16.23-11.el9_2.9
bind-dnssec-utils-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.9
32:9.16.23-11.el9_2.9
bind-libs
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.9
32:9.16.23-11.el9_2.9
bind-libs-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.9
32:9.16.23-11.el9_2.9
bind-license
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.9
32:9.16.23-11.el9_2.9
bind-utils
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.9
32:9.16.23-11.el9_2.9
bind-utils-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.9
32:9.16.23-11.el9_2.9
python3-bind
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-11.el9_2.9
32:9.16.23-11.el9_2.9
bind
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 32:9.16.23-1.el9_0.11
32:9.16.23-1.el9_0.11
bind-chroot
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 32:9.16.23-1.el9_0.11
32:9.16.23-1.el9_0.11
bind-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 32:9.16.23-1.el9_0.11
32:9.16.23-1.el9_0.11
bind-debugsource
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 32:9.16.23-1.el9_0.11
32:9.16.23-1.el9_0.11
bind-dnssec-doc
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 32:9.16.23-1.el9_0.11
32:9.16.23-1.el9_0.11
bind-dnssec-utils
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 32:9.16.23-1.el9_0.11
32:9.16.23-1.el9_0.11
bind-dnssec-utils-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 32:9.16.23-1.el9_0.11
32:9.16.23-1.el9_0.11
bind-libs
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 32:9.16.23-1.el9_0.11
32:9.16.23-1.el9_0.11
bind-libs-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 32:9.16.23-1.el9_0.11
32:9.16.23-1.el9_0.11
bind-license
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 32:9.16.23-1.el9_0.11
32:9.16.23-1.el9_0.11
bind-utils
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 32:9.16.23-1.el9_0.11
32:9.16.23-1.el9_0.11
bind-utils-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 32:9.16.23-1.el9_0.11
32:9.16.23-1.el9_0.11
python3-bind
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 32:9.16.23-1.el9_0.11
32:9.16.23-1.el9_0.11
bind9.16
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.14.el8_8.7
32:9.16.23-0.14.el8_8.7
bind9.16-chroot
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.14.el8_8.7
32:9.16.23-0.14.el8_8.7
bind9.16-debuginfo
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.14.el8_8.7
32:9.16.23-0.14.el8_8.7
bind9.16-debugsource
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.14.el8_8.7
32:9.16.23-0.14.el8_8.7
bind9.16-dnssec-utils
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.14.el8_8.7
32:9.16.23-0.14.el8_8.7
bind9.16-dnssec-utils-debuginfo
Red Hat:rhel_e4s:8.8::appstream
From an advisory covering 2 CVEs
 before 32:9.16.23-0.14.el8_8.7
32:9.16.23-0.14.el8_8.7
bind9.16
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:9.16.23-0.22.el8_10.4
2:9.16.23-0.22.el8_10.4
bind
Rocky Linux:10
From an advisory covering 3 CVEs
 before 2:9.18.33-10.el10_1.2
2:9.18.33-10.el10_1.2
bind
Rocky Linux:9
From an advisory covering 2 CVEs
 before 2:9.16.23-34.el9_7.1
2:9.16.23-34.el9_7.1
bind9.18
Rocky Linux:9
From an advisory covering 3 CVEs
 before 2:9.18.29-5.el9_7.2
2:9.18.29-5.el9_7.2
bind
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 3 CVEs
 before 9.20.15-150700.3.12.1
9.20.15-150700.3.12.1
bind
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 3 CVEs
 before 9.20.15-150700.3.12.1
9.20.15-150700.3.12.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 9.16.50-150400.5.56.1
9.16.50-150400.5.56.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 9.16.50-150400.5.56.1
9.16.50-150400.5.56.1
bind
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 9.16.50-150400.5.56.1
9.16.50-150400.5.56.1
bind
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 9.16.50-150400.5.56.1
9.16.50-150400.5.56.1
bind
SUSE:Manager Proxy LTS 4.3
From an advisory covering 2 CVEs
 before 9.16.50-150400.5.56.1
9.16.50-150400.5.56.1
bind
SUSE:Manager Server LTS 4.3
From an advisory covering 2 CVEs
 before 9.16.50-150400.5.56.1
9.16.50-150400.5.56.1
bind
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 2 CVEs
 before 9.16.50-150500.8.32.1
9.16.50-150500.8.32.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 9.16.50-150500.8.32.1
9.16.50-150500.8.32.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 9.16.50-150500.8.32.1
9.16.50-150500.8.32.1
bind
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 9.16.50-150500.8.32.1
9.16.50-150500.8.32.1
bind
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 2 CVEs
 before 9.16.50-150500.8.32.1
9.16.50-150500.8.32.1
bind
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 2 CVEs
 before 9.16.6-150300.22.53.1
9.16.6-150300.22.53.1
bind
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 2 CVEs
 before 9.16.6-150300.22.53.1
9.16.6-150300.22.53.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 9.16.6-150300.22.53.1
9.16.6-150300.22.53.1
bind
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 9.16.6-150300.22.53.1
9.16.6-150300.22.53.1
bind
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 2 CVEs
 before 9.16.6-150300.22.53.1
9.16.6-150300.22.53.1
bind
SUSE:Enterprise Storage 7.1
From an advisory covering 2 CVEs
 before 9.16.6-150300.22.53.1
9.16.6-150300.22.53.1
bind
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 3 CVEs
 before 9.18.33-150600.3.18.1
9.18.33-150600.3.18.1
bind
SUSE:Linux Enterprise Module for Server Applications 15 SP6
From an advisory covering 3 CVEs
 before 9.18.33-150600.3.18.1
9.18.33-150600.3.18.1
bind
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
 before 9.18.33-150600.3.18.1
9.18.33-150600.3.18.1
bind
SUSE:Multi Linux Manager Tools SLE-Micro-5
From an advisory covering 2 CVEs
 before 9.16.6-150000.12.85.1
9.16.6-150000.12.85.1
bind
SUSE:Manager Client Tools for SLE Micro 5
From an advisory covering 2 CVEs
 before 9.16.6-150000.12.85.1
9.16.6-150000.12.85.1
bind
SUSE:Linux Enterprise Server 16.0
From an advisory covering 3 CVEs
 before 9.20.15-160000.1.1
9.20.15-160000.1.1
bind
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 3 CVEs
 before 9.20.15-160000.1.1
9.20.15-160000.1.1
isc-dhcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.3.5-3ubuntu24.3.5-3ubuntu34.3.5-3ubuntu44.3.5-3ubuntu54.3.5-3ubuntu6
Show 5 moreShow less
4.3.5-3ubuntu74.3.5-3ubuntu7.14.3.5-3ubuntu7.24.3.5-3ubuntu7.34.3.5-3ubuntu7.4
 None known
bind9
Ubuntu:Pro:20.04:LTS
 before 1:9.18.30-0ubuntu0.20.04.2+esm1, plus listed versions
1:9.11.5.P4+dfsg-5.1ubuntu21:9.11.5.P4+dfsg-5.1ubuntu31:9.11.5.P4+dfsg-5.1ubuntu41:9.11.5.P4+dfsg-5.1ubuntu51:9.11.14+dfsg-1ubuntu1
Show 24 moreShow less
1:9.11.14+dfsg-3ubuntu11:9.16.0-1ubuntu31:9.16.0-1ubuntu41:9.16.0-1ubuntu51:9.16.1-0ubuntu11:9.16.1-0ubuntu21:9.16.1-0ubuntu2.11:9.16.1-0ubuntu2.21:9.16.1-0ubuntu2.31:9.16.1-0ubuntu2.41:9.16.1-0ubuntu2.61:9.16.1-0ubuntu2.71:9.16.1-0ubuntu2.81:9.16.1-0ubuntu2.91:9.16.1-0ubuntu2.101:9.16.1-0ubuntu2.111:9.16.1-0ubuntu2.121:9.16.1-0ubuntu2.141:9.16.1-0ubuntu2.151:9.16.1-0ubuntu2.161:9.16.48-0ubuntu0.20.04.11:9.18.28-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.2
1:9.18.30-0ubuntu0.20.04.2+esm1
bind9-libs
Ubuntu:20.04:LTS
 All versions, plus listed versions
1:9.11.16+dfsg-3~build11:9.11.16+dfsg-3~ubuntu1
 None known
bind9
Ubuntu:22.04:LTS
 before 1:9.18.39-0ubuntu0.22.04.2, plus listed versions
1:9.16.15-1ubuntu11:9.16.15-1ubuntu21:9.16.15-1ubuntu31:9.18.0-2ubuntu11:9.18.0-2ubuntu2
Show 15 moreShow less
1:9.18.0-2ubuntu31:9.18.1-1ubuntu11:9.18.1-1ubuntu1.11:9.18.1-1ubuntu1.21:9.18.1-1ubuntu1.31:9.18.12-0ubuntu0.22.04.11:9.18.12-0ubuntu0.22.04.21:9.18.12-0ubuntu0.22.04.31:9.18.18-0ubuntu0.22.04.11:9.18.18-0ubuntu0.22.04.21:9.18.24-0ubuntu0.22.04.11:9.18.28-0ubuntu0.22.04.11:9.18.30-0ubuntu0.22.04.11:9.18.30-0ubuntu0.22.04.21:9.18.39-0ubuntu0.22.04.1
1:9.18.39-0ubuntu0.22.04.2
bind9-libs
Ubuntu:22.04:LTS
 All versions, plus listed versions
1:9.11.19+dfsg-2.1ubuntu11:9.11.19+dfsg-2.1ubuntu21:9.11.19+dfsg-2.1ubuntu3
 None known
bind9
Ubuntu:24.04:LTS
 before 1:9.18.39-0ubuntu0.24.04.2, plus listed versions
1:9.18.18-0ubuntu21:9.18.21-0ubuntu11:9.18.24-0ubuntu31:9.18.24-0ubuntu41:9.18.24-0ubuntu5
Show 4 moreShow less
1:9.18.28-0ubuntu0.24.04.11:9.18.30-0ubuntu0.24.04.11:9.18.30-0ubuntu0.24.04.21:9.18.39-0ubuntu0.24.04.1
1:9.18.39-0ubuntu0.24.04.2
isc-dhcp
Ubuntu:24.04:LTS
 All versions, plus listed versions
4.4.3-P1-2ubuntu54.4.3-P1-4ubuntu14.4.3-P1-4ubuntu2
 None known
bind9
Ubuntu:25.10
 before 1:9.20.11-1ubuntu2.1, plus listed versions
1:9.20.4-3ubuntu11:9.20.4-3ubuntu21:9.20.4-3ubuntu31:9.20.9-2ubuntu11:9.20.10-1ubuntu11:9.20.11-1ubuntu11:9.20.11-1ubuntu2
1:9.20.11-1ubuntu2.1
isc-dhcp
Ubuntu:25.10
 All versions, plus listed versions
4.4.3-P1-4ubuntu2
 None known
bind9
Ubuntu:26.04:LTS
 before 1:9.20.11-1ubuntu3, plus listed versions
1:9.20.11-1ubuntu2
1:9.20.11-1ubuntu3
isc-dhcp
Ubuntu:26.04:LTS
 All versions, plus listed versions
4.4.3-P1-4ubuntu2
 None known
bind9
Ubuntu:22.04:LTS
From an advisory covering 3 CVEs
 before 1:9.18.39-0ubuntu0.22.04.2, plus listed versions
1:9.16.15-1ubuntu11:9.16.15-1ubuntu21:9.16.15-1ubuntu31:9.18.0-2ubuntu11:9.18.0-2ubuntu2
Show 15 moreShow less
1:9.18.0-2ubuntu31:9.18.1-1ubuntu11:9.18.1-1ubuntu1.11:9.18.1-1ubuntu1.21:9.18.1-1ubuntu1.31:9.18.12-0ubuntu0.22.04.11:9.18.12-0ubuntu0.22.04.21:9.18.12-0ubuntu0.22.04.31:9.18.18-0ubuntu0.22.04.11:9.18.18-0ubuntu0.22.04.21:9.18.24-0ubuntu0.22.04.11:9.18.28-0ubuntu0.22.04.11:9.18.30-0ubuntu0.22.04.11:9.18.30-0ubuntu0.22.04.21:9.18.39-0ubuntu0.22.04.1
1:9.18.39-0ubuntu0.22.04.2
bind9
Ubuntu:24.04:LTS
From an advisory covering 3 CVEs
 before 1:9.18.39-0ubuntu0.24.04.2, plus listed versions
1:9.18.18-0ubuntu21:9.18.21-0ubuntu11:9.18.24-0ubuntu31:9.18.24-0ubuntu41:9.18.24-0ubuntu5
Show 4 moreShow less
1:9.18.28-0ubuntu0.24.04.11:9.18.30-0ubuntu0.24.04.11:9.18.30-0ubuntu0.24.04.21:9.18.39-0ubuntu0.24.04.1
1:9.18.39-0ubuntu0.24.04.2
bind9
Ubuntu:25.10
From an advisory covering 3 CVEs
 before 1:9.20.11-1ubuntu2.1, plus listed versions
1:9.20.4-3ubuntu11:9.20.4-3ubuntu21:9.20.4-3ubuntu31:9.20.9-2ubuntu11:9.20.10-1ubuntu11:9.20.11-1ubuntu11:9.20.11-1ubuntu2
1:9.20.11-1ubuntu2.1
bind9
Ubuntu:Pro:20.04:LTS
From an advisory covering 3 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2+esm1, plus listed versions
1:9.11.5.P4+dfsg-5.1ubuntu21:9.11.5.P4+dfsg-5.1ubuntu31:9.11.5.P4+dfsg-5.1ubuntu41:9.11.5.P4+dfsg-5.1ubuntu51:9.11.14+dfsg-1ubuntu1
Show 24 moreShow less
1:9.11.14+dfsg-3ubuntu11:9.16.0-1ubuntu31:9.16.0-1ubuntu41:9.16.0-1ubuntu51:9.16.1-0ubuntu11:9.16.1-0ubuntu21:9.16.1-0ubuntu2.11:9.16.1-0ubuntu2.21:9.16.1-0ubuntu2.31:9.16.1-0ubuntu2.41:9.16.1-0ubuntu2.61:9.16.1-0ubuntu2.71:9.16.1-0ubuntu2.81:9.16.1-0ubuntu2.91:9.16.1-0ubuntu2.101:9.16.1-0ubuntu2.111:9.16.1-0ubuntu2.121:9.16.1-0ubuntu2.141:9.16.1-0ubuntu2.151:9.16.1-0ubuntu2.161:9.16.48-0ubuntu0.20.04.11:9.18.28-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.2
1:9.18.30-0ubuntu0.20.04.2+esm1
bind
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 9.20.15-1.1
9.20.15-1.1
bind
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 9.20.15-160000.1.1
9.20.15-160000.1.1

History

History
RecordedChangedSources
affected, facts
affected, aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-40780 is a high vulnerability (CVSS 8.6) in Isc Bind 9, published October 22, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 40th percentile. Fixed in bind 9.18.41-r0.

References

Show 112 moreShow less
This page doesn't list everything

Left out here: 55 package rows. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open