Every CVE Search/ Get API key

CVE-2025-40778

Cache poisoning attacks with unsolicited RRs

8.6 HighPublic exploitFix available

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

0.67%Up 0.7 points since Oct 23, 2025
90%50%10%1%

What each source reports

CVE List Score used 8.6

Cache poisoning attacks with unsolicited RRs

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
CVE-2025-40778
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Weakness
CWE-349
Updated
2026-11-02
EUVDEUVD-2025-35581 8.6

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
EUVD-2025-35581
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-xmqp-6cj2-2hh3 8.6

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an...

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
GHSA-xmqp-6cj2-2hh3
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Weakness
CWE-349
Updated
2026-11-02
NVD 8.6

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
CVE-2025-40778
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Weakness
CWE-349
Updated
2026-11-02
OSVALPINE-CVE-2025-40778 8.6

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
ALPINE-CVE-2025-40778
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVBELL-CVE-2025-40778 8.6
Record
BELL-CVE-2025-40778
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2025-40778 8.6

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
DEBIAN-CVE-2025-40778
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2653 8.6

bind security update

Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.

Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40780)

Record
OESA-2025-2653
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2654 8.6

bind security update

Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.

Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40780)

Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-8677)

Record
OESA-2025-2654
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2716 8.6

bind security update

Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.

Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40780)

Record
OESA-2025-2716
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2717 8.6

bind security update

Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.

Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40780)

Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-8677)

Record
OESA-2025-2717
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2718 8.6

bind security update

Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.

Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40780)

Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-8677)

Record
OESA-2025-2718
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2759 8.6

bind security update

Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.

Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

Record
OESA-2025-2759
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2842 8.6

dhcp security update

The Dynamic Host Configuration Protocol (DHCP) is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks.

Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

Record
OESA-2025-2842
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2843 8.6

dhcp security update

The Dynamic Host Configuration Protocol (DHCP) is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks.

Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

Record
OESA-2025-2843
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2025-2875 8.6

dhcp security update

The Dynamic Host Configuration Protocol (DHCP) is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks.

Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

Record
OESA-2025-2875
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2026-1601 8.6

dhcp security update

The Dynamic Host Configuration Protocol (DHCP) is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks.

Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

Record
OESA-2026-1601
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVOESA-2026-1602 8.6

dhcp security update

The Dynamic Host Configuration Protocol (DHCP) is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks.

Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

Record
OESA-2026-1602
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:19793 8.6

Red Hat Security Advisory: bind9.16 security update

Record
RHSA-2025:19793
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:19835 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:19835
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:19912 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:19912
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:19950 8.6

Red Hat Security Advisory: bind9.18 security update

Record
RHSA-2025:19950
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:19951 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:19951
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21034 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:21034
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21110 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:21110
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21111 8.6

Red Hat Security Advisory: bind9.18 security update

Record
RHSA-2025:21111
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21735 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:21735
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21736 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:21736
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21740 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:21740
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21741 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:21741
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21817 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:21817
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21887 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:21887
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21889 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:21889
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:21939 8.6

Red Hat Security Advisory: bind9.16 security update

Record
RHSA-2025:21939
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:22168 8.6

Red Hat Security Advisory: bind9.16 security update

Record
RHSA-2025:22168
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:22205 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:22205
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2025:23414 8.6

Red Hat Security Advisory: bind security update

Record
RHSA-2025:23414
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:6935 8.6

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:6935
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2025:19793 8.6

Important: bind9.16 security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)

  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:19793
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2025:19835 8.6

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:19835
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2025:21034 8.6

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)

  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

  • bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:21034
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2025:21110 8.6

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)

  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:21110
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRLSA-2025:21111 8.6

Important: bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)

  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

  • bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:21111
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2025-40778 8.6

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
UBUNTU-CVE-2025-40778
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVALSA-2025:19793 No score

Important: bind9.16 security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:19793
Updated
2026-11-02
OSVALSA-2025:19835 No score

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:19835
Updated
2026-11-02
OSVALSA-2025:19912 No score

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)
  • bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:19912
Updated
2026-11-02
OSVALSA-2025:19950 No score

Important: bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)
  • bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:19950
Updated
2026-11-02
OSVALSA-2025:21034 No score

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)
  • bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:21034
Updated
2026-11-02
OSVALSA-2025:21110 No score

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:21110
Updated
2026-11-02
OSVALSA-2025:21111 No score

Important: bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

  • bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
  • bind: Cache poisoning due to weak PRNG (CVE-2025-40780)
  • bind: Resource exhaustion via malformed DNSKEY handling (CVE-2025-8677)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:21111
Updated
2026-11-02
OSVAZL-68727 No score

CVE-2025-40778 affecting package bind for versions less than 9.16.50-3

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
AZL-68727
Updated
2026-11-02
OSVAZL-68736 No score

CVE-2025-40778 affecting package bind for versions less than 9.20.15-1

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Record
AZL-68736
Updated
2026-11-02
OSVCLSA-2025-1764084458 No score

bind: Fix of 2 CVEs

  • CVE-2025-40780: fix randomness sources, drop obsolete PRNG test
  • CVE-2025-40778: fix NS caching, DNAME/referral handling, restore IPv6 TCP tests
Record
CLSA-2025-1764084458
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bind
Alpine:v3.19
before 9.18.41-r0
9.18.41-r0
bind
Alpine:v3.20
before 9.18.41-r0
9.18.41-r0
bind
Alpine:v3.21
before 9.18.41-r0
9.18.41-r0
bind
Alpine:v3.22
before 9.20.15-r0
9.20.15-r0
bind
Alpine:v3.23
before 9.20.15-r0
9.20.15-r0
bind
Alpine:v3.24
before 9.20.15-r0
9.20.15-r0
bind9.16
AlmaLinux:8
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-chroot
AlmaLinux:8
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-devel
AlmaLinux:8
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-dnssec-utils
AlmaLinux:8
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
Show 290 moreShow less
Affected packages
PackageAffectedFixed
bind9.16-doc
AlmaLinux:8
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-libs
AlmaLinux:8
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-license
AlmaLinux:8
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-utils
AlmaLinux:8
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
python3-bind9.16
AlmaLinux:8
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind
AlmaLinux:8
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-chroot
AlmaLinux:8
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-devel
AlmaLinux:8
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-export-devel
AlmaLinux:8
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-export-libs
AlmaLinux:8
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-libs
AlmaLinux:8
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-libs-lite
AlmaLinux:8
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-license
AlmaLinux:8
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-lite-devel
AlmaLinux:8
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-pkcs11
AlmaLinux:8
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-pkcs11-devel
AlmaLinux:8
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-pkcs11-libs
AlmaLinux:8
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-pkcs11-utils
AlmaLinux:8
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-sdb
AlmaLinux:8
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-sdb-chroot
AlmaLinux:8
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-utils
AlmaLinux:8
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
python3-bind
AlmaLinux:8
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-doc
AlmaLinux:10
From an advisory covering 3 CVEs
before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-license
AlmaLinux:10
From an advisory covering 3 CVEs
before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind9.18
AlmaLinux:9
From an advisory covering 3 CVEs
before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-chroot
AlmaLinux:9
From an advisory covering 3 CVEs
before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-devel
AlmaLinux:9
From an advisory covering 3 CVEs
before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-dnssec-utils
AlmaLinux:9
From an advisory covering 3 CVEs
before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-doc
AlmaLinux:9
From an advisory covering 3 CVEs
before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-libs
AlmaLinux:9
From an advisory covering 3 CVEs
before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-utils
AlmaLinux:9
From an advisory covering 3 CVEs
before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind
AlmaLinux:10
From an advisory covering 3 CVEs
before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-chroot
AlmaLinux:10
From an advisory covering 3 CVEs
before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-devel
AlmaLinux:10
From an advisory covering 3 CVEs
before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-dnssec-utils
AlmaLinux:10
From an advisory covering 3 CVEs
before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-doc
AlmaLinux:10
From an advisory covering 3 CVEs
before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-libs
AlmaLinux:10
From an advisory covering 3 CVEs
before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-license
AlmaLinux:10
From an advisory covering 3 CVEs
before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind-utils
AlmaLinux:10
From an advisory covering 3 CVEs
before 32:9.18.33-10.el10_1.2
32:9.18.33-10.el10_1.2
bind
AlmaLinux:9
From an advisory covering 2 CVEs
before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-chroot
AlmaLinux:9
From an advisory covering 2 CVEs
before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-devel
AlmaLinux:9
From an advisory covering 2 CVEs
before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-dnssec-doc
AlmaLinux:9
From an advisory covering 2 CVEs
before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-dnssec-utils
AlmaLinux:9
From an advisory covering 2 CVEs
before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-doc
AlmaLinux:9
From an advisory covering 2 CVEs
before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-libs
AlmaLinux:9
From an advisory covering 2 CVEs
before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-license
AlmaLinux:9
From an advisory covering 2 CVEs
before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind-utils
AlmaLinux:9
From an advisory covering 2 CVEs
before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
python3-bind
AlmaLinux:9
From an advisory covering 2 CVEs
before 32:9.16.23-34.el9_7.1
32:9.16.23-34.el9_7.1
bind9.18
AlmaLinux:9
From an advisory covering 3 CVEs
before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-chroot
AlmaLinux:9
From an advisory covering 3 CVEs
before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-devel
AlmaLinux:9
From an advisory covering 3 CVEs
before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-dnssec-utils
AlmaLinux:9
From an advisory covering 3 CVEs
before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-doc
AlmaLinux:9
From an advisory covering 3 CVEs
before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-libs
AlmaLinux:9
From an advisory covering 3 CVEs
before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind9.18-utils
AlmaLinux:9
From an advisory covering 3 CVEs
before 32:9.18.29-5.el9_7.2
32:9.18.29-5.el9_7.2
bind
Azure Linux:2
before 9.16.50-3
9.16.50-3
bind
Azure Linux:3
before 9.20.15-1
9.20.15-1
bind
Alpaquita:23
9.18.11-r0 up to 9.18.41-r0
9.18.41-r0
bind
Alpaquita:25
9.20.9-r0 up to 9.20.15-r0
9.20.15-r0
bind
Alpaquita:stream
9.18.16-r0 up to 9.20.15-r0
9.20.15-r0
bind
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind-chroot
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind-dnssec-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind-dnssec-utils
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind-license
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind-utils
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
python3-bind
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 32:9.16.23-11.el9_2.2.tuxcare.els8
32:9.16.23-11.el9_2.2.tuxcare.els8
bind
TuxCare:CentOS-Stream:8
before 32:9.11.36-13.el8.tuxcare.els6
32:9.11.36-13.el8.tuxcare.els6
bind-chroot
TuxCare:CentOS-Stream:8
before 32:9.11.36-13.el8.tuxcare.els6
32:9.11.36-13.el8.tuxcare.els6
bind-devel
TuxCare:CentOS-Stream:8
before 32:9.11.36-13.el8.tuxcare.els6
32:9.11.36-13.el8.tuxcare.els6
bind-export-devel
TuxCare:CentOS-Stream:8
before 32:9.11.36-13.el8.tuxcare.els6
32:9.11.36-13.el8.tuxcare.els6
bind-export-libs
TuxCare:CentOS-Stream:8
before 32:9.11.36-13.el8.tuxcare.els6
32:9.11.36-13.el8.tuxcare.els6
bind-libs
TuxCare:CentOS-Stream:8
before 32:9.11.36-13.el8.tuxcare.els6
32:9.11.36-13.el8.tuxcare.els6
bind-libs-lite
TuxCare:CentOS-Stream:8
before 32:9.11.36-13.el8.tuxcare.els6
32:9.11.36-13.el8.tuxcare.els6
bind-license
TuxCare:CentOS-Stream:8
before 32:9.11.36-13.el8.tuxcare.els6
32:9.11.36-13.el8.tuxcare.els6
bind-lite-devel
TuxCare:CentOS-Stream:8
before 32:9.11.36-13.el8.tuxcare.els6
32:9.11.36-13.el8.tuxcare.els6
bind-pkcs11
TuxCare:CentOS-Stream:8
before 32:9.11.36-13.el8.tuxcare.els6
32:9.11.36-13.el8.tuxcare.els6
bind-pkcs11-devel
TuxCare:CentOS-Stream:8
before 32:9.11.36-13.el8.tuxcare.els6
32:9.11.36-13.el8.tuxcare.els6
bind-pkcs11-libs
TuxCare:CentOS-Stream:8
before 32:9.11.36-13.el8.tuxcare.els6
32:9.11.36-13.el8.tuxcare.els6
bind-pkcs11-utils
TuxCare:CentOS-Stream:8
before 32:9.11.36-13.el8.tuxcare.els6
32:9.11.36-13.el8.tuxcare.els6
bind-sdb
TuxCare:CentOS-Stream:8
before 32:9.11.36-13.el8.tuxcare.els6
32:9.11.36-13.el8.tuxcare.els6
bind-sdb-chroot
TuxCare:CentOS-Stream:8
before 32:9.11.36-13.el8.tuxcare.els6
32:9.11.36-13.el8.tuxcare.els6
bind-utils
TuxCare:CentOS-Stream:8
before 32:9.11.36-13.el8.tuxcare.els6
32:9.11.36-13.el8.tuxcare.els6
python3-bind
TuxCare:CentOS-Stream:8
before 32:9.11.36-13.el8.tuxcare.els6
32:9.11.36-13.el8.tuxcare.els6
bind
TuxCare:CentOS:8.4
before 32:9.11.26-4.el8.4.tuxcare.els13
32:9.11.26-4.el8.4.tuxcare.els13
bind-chroot
TuxCare:CentOS:8.4
before 32:9.11.26-4.el8.4.tuxcare.els13
32:9.11.26-4.el8.4.tuxcare.els13
bind-devel
TuxCare:CentOS:8.4
before 32:9.11.26-4.el8.4.tuxcare.els13
32:9.11.26-4.el8.4.tuxcare.els13
bind-export-devel
TuxCare:CentOS:8.4
before 32:9.11.26-4.el8.4.tuxcare.els13
32:9.11.26-4.el8.4.tuxcare.els13
bind-export-libs
TuxCare:CentOS:8.4
before 32:9.11.26-4.el8.4.tuxcare.els13
32:9.11.26-4.el8.4.tuxcare.els13
bind-libs
TuxCare:CentOS:8.4
before 32:9.11.26-4.el8.4.tuxcare.els13
32:9.11.26-4.el8.4.tuxcare.els13
bind-libs-lite
TuxCare:CentOS:8.4
before 32:9.11.26-4.el8.4.tuxcare.els13
32:9.11.26-4.el8.4.tuxcare.els13
bind-license
TuxCare:CentOS:8.4
before 32:9.11.26-4.el8.4.tuxcare.els13
32:9.11.26-4.el8.4.tuxcare.els13
bind-lite-devel
TuxCare:CentOS:8.4
before 32:9.11.26-4.el8.4.tuxcare.els13
32:9.11.26-4.el8.4.tuxcare.els13
bind-pkcs11
TuxCare:CentOS:8.4
before 32:9.11.26-4.el8.4.tuxcare.els13
32:9.11.26-4.el8.4.tuxcare.els13
bind-pkcs11-devel
TuxCare:CentOS:8.4
before 32:9.11.26-4.el8.4.tuxcare.els13
32:9.11.26-4.el8.4.tuxcare.els13
bind-pkcs11-libs
TuxCare:CentOS:8.4
before 32:9.11.26-4.el8.4.tuxcare.els13
32:9.11.26-4.el8.4.tuxcare.els13
bind-pkcs11-utils
TuxCare:CentOS:8.4
before 32:9.11.26-4.el8.4.tuxcare.els13
32:9.11.26-4.el8.4.tuxcare.els13
bind-sdb
TuxCare:CentOS:8.4
before 32:9.11.26-4.el8.4.tuxcare.els13
32:9.11.26-4.el8.4.tuxcare.els13
bind-sdb-chroot
TuxCare:CentOS:8.4
before 32:9.11.26-4.el8.4.tuxcare.els13
32:9.11.26-4.el8.4.tuxcare.els13
bind-utils
TuxCare:CentOS:8.4
before 32:9.11.26-4.el8.4.tuxcare.els13
32:9.11.26-4.el8.4.tuxcare.els13
python3-bind
TuxCare:CentOS:8.4
before 32:9.11.26-4.el8.4.tuxcare.els13
32:9.11.26-4.el8.4.tuxcare.els13
bind
TuxCare:CentOS:8.5
before 32:9.11.26-6.el8.tuxcare.els12
32:9.11.26-6.el8.tuxcare.els12
bind-chroot
TuxCare:CentOS:8.5
before 32:9.11.26-6.el8.tuxcare.els12
32:9.11.26-6.el8.tuxcare.els12
bind-devel
TuxCare:CentOS:8.5
before 32:9.11.26-6.el8.tuxcare.els12
32:9.11.26-6.el8.tuxcare.els12
bind-export-devel
TuxCare:CentOS:8.5
before 32:9.11.26-6.el8.tuxcare.els12
32:9.11.26-6.el8.tuxcare.els12
bind-export-libs
TuxCare:CentOS:8.5
before 32:9.11.26-6.el8.tuxcare.els12
32:9.11.26-6.el8.tuxcare.els12
bind-libs
TuxCare:CentOS:8.5
before 32:9.11.26-6.el8.tuxcare.els12
32:9.11.26-6.el8.tuxcare.els12
bind-libs-lite
TuxCare:CentOS:8.5
before 32:9.11.26-6.el8.tuxcare.els12
32:9.11.26-6.el8.tuxcare.els12
bind-license
TuxCare:CentOS:8.5
before 32:9.11.26-6.el8.tuxcare.els12
32:9.11.26-6.el8.tuxcare.els12
bind-lite-devel
TuxCare:CentOS:8.5
before 32:9.11.26-6.el8.tuxcare.els12
32:9.11.26-6.el8.tuxcare.els12
bind-pkcs11
TuxCare:CentOS:8.5
before 32:9.11.26-6.el8.tuxcare.els12
32:9.11.26-6.el8.tuxcare.els12
bind-pkcs11-devel
TuxCare:CentOS:8.5
before 32:9.11.26-6.el8.tuxcare.els12
32:9.11.26-6.el8.tuxcare.els12
bind-pkcs11-libs
TuxCare:CentOS:8.5
before 32:9.11.26-6.el8.tuxcare.els12
32:9.11.26-6.el8.tuxcare.els12
bind-pkcs11-utils
TuxCare:CentOS:8.5
before 32:9.11.26-6.el8.tuxcare.els12
32:9.11.26-6.el8.tuxcare.els12
bind-sdb
TuxCare:CentOS:8.5
before 32:9.11.26-6.el8.tuxcare.els12
32:9.11.26-6.el8.tuxcare.els12
bind-sdb-chroot
TuxCare:CentOS:8.5
before 32:9.11.26-6.el8.tuxcare.els12
32:9.11.26-6.el8.tuxcare.els12
bind-utils
TuxCare:CentOS:8.5
before 32:9.11.26-6.el8.tuxcare.els12
32:9.11.26-6.el8.tuxcare.els12
python3-bind
TuxCare:CentOS:8.5
before 32:9.11.26-6.el8.tuxcare.els12
32:9.11.26-6.el8.tuxcare.els12
bind
TuxCare:RHEL:7
before 33:9.11.4-26.P2.el7_9.16.tuxcare.els11
33:9.11.4-26.P2.el7_9.16.tuxcare.els11
bind-chroot
TuxCare:RHEL:7
before 33:9.11.4-26.P2.el7_9.16.tuxcare.els11
33:9.11.4-26.P2.el7_9.16.tuxcare.els11
bind-devel
TuxCare:RHEL:7
before 33:9.11.4-26.P2.el7_9.16.tuxcare.els11
33:9.11.4-26.P2.el7_9.16.tuxcare.els11
bind-export-devel
TuxCare:RHEL:7
before 33:9.11.4-26.P2.el7_9.16.tuxcare.els11
33:9.11.4-26.P2.el7_9.16.tuxcare.els11
bind-export-libs
TuxCare:RHEL:7
before 33:9.11.4-26.P2.el7_9.16.tuxcare.els11
33:9.11.4-26.P2.el7_9.16.tuxcare.els11
bind-libs
TuxCare:RHEL:7
before 33:9.11.4-26.P2.el7_9.16.tuxcare.els11
33:9.11.4-26.P2.el7_9.16.tuxcare.els11
bind-libs-lite
TuxCare:RHEL:7
before 33:9.11.4-26.P2.el7_9.16.tuxcare.els11
33:9.11.4-26.P2.el7_9.16.tuxcare.els11
bind-license
TuxCare:RHEL:7
before 33:9.11.4-26.P2.el7_9.16.tuxcare.els11
33:9.11.4-26.P2.el7_9.16.tuxcare.els11
bind-lite-devel
TuxCare:RHEL:7
before 33:9.11.4-26.P2.el7_9.16.tuxcare.els11
33:9.11.4-26.P2.el7_9.16.tuxcare.els11
bind-pkcs11
TuxCare:RHEL:7
before 33:9.11.4-26.P2.el7_9.16.tuxcare.els11
33:9.11.4-26.P2.el7_9.16.tuxcare.els11
bind-pkcs11-devel
TuxCare:RHEL:7
before 33:9.11.4-26.P2.el7_9.16.tuxcare.els11
33:9.11.4-26.P2.el7_9.16.tuxcare.els11
bind-pkcs11-libs
TuxCare:RHEL:7
before 33:9.11.4-26.P2.el7_9.16.tuxcare.els11
33:9.11.4-26.P2.el7_9.16.tuxcare.els11
bind-pkcs11-utils
TuxCare:RHEL:7
before 33:9.11.4-26.P2.el7_9.16.tuxcare.els11
33:9.11.4-26.P2.el7_9.16.tuxcare.els11
bind-sdb
TuxCare:RHEL:7
before 33:9.11.4-26.P2.el7_9.16.tuxcare.els11
33:9.11.4-26.P2.el7_9.16.tuxcare.els11
bind-sdb-chroot
TuxCare:RHEL:7
before 33:9.11.4-26.P2.el7_9.16.tuxcare.els11
33:9.11.4-26.P2.el7_9.16.tuxcare.els11
bind9
Debian:12
before 1:9.18.41-1~deb12u1, plus listed versions
1:9.18.12-11:9.18.13-11:9.18.16-11:9.18.16-1~deb12u11:9.18.16-1~deb12u1~bpo11+1
Show 7 moreShow less
1:9.18.19-1~deb12u11:9.18.19-1~deb12u1~bpo11+11:9.18.24-11:9.18.24-1~bpo11+11:9.18.28-1~deb12u11:9.18.28-1~deb12u21:9.18.33-1~deb12u2
1:9.18.41-1~deb12u1
bind9
Debian:13
before 1:9.20.15-1~deb13u1, plus listed versions
1:9.20.11-41:9.20.15-1~deb13u1~bpo12+1
1:9.20.15-1~deb13u1
bind9
Debian:14
before 1:9.20.15-1, plus listed versions
1:9.20.11-41:9.20.15-1~deb13u11:9.20.15-1~deb13u1~bpo12+1
1:9.20.15-1
bind9
Debian:11
From an advisory covering 3 CVEs
before 1:9.16.50-1~deb11u4, plus listed versions
1:9.16.15-11:9.16.21-11:9.16.21-1+hurd.11:9.16.22-1~deb11u11:9.16.22-1~deb11u1~bpo10+1
Show 10 moreShow less
1:9.16.27-1~deb11u11:9.16.27-1~deb11u1~bpo10+11:9.16.33-1~deb11u11:9.16.37-1~deb11u11:9.16.42-1~deb11u11:9.16.44-1~deb11u11:9.16.48-11:9.16.50-1~deb11u11:9.16.50-1~deb11u21:9.16.50-1~deb11u3
1:9.16.50-1~deb11u4
bind9
Debian:12
From an advisory covering 3 CVEs
before 1:9.18.41-1~deb12u1, plus listed versions
1:9.18.12-11:9.18.13-11:9.18.16-11:9.18.16-1~deb12u11:9.18.16-1~deb12u1~bpo11+1
Show 7 moreShow less
1:9.18.19-1~deb12u11:9.18.19-1~deb12u1~bpo11+11:9.18.24-11:9.18.24-1~bpo11+11:9.18.28-1~deb12u11:9.18.28-1~deb12u21:9.18.33-1~deb12u2
1:9.18.41-1~deb12u1
bind9
Debian:13
From an advisory covering 3 CVEs
before 1:9.20.15-1~deb13u1, plus listed versions
1:9.20.11-41:9.20.15-1~deb13u1~bpo12+1
1:9.20.15-1~deb13u1
bind
Mageia:9
From an advisory covering 3 CVEs
before 9.18.39-1.1.mga9
9.18.39-1.1.mga9
bind
openEuler:22.03-LTS-SP3
From an advisory covering 2 CVEs
before 9.16.23-28.oe2203sp3
9.16.23-28.oe2203sp3
bind
openEuler:24.03-LTS-SP1
From an advisory covering 3 CVEs
before 9.18.21-5.oe2403sp1
9.18.21-5.oe2403sp1
bind
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
before 9.16.23-28.oe2203sp4
9.16.23-28.oe2203sp4
bind
openEuler:24.03-LTS
From an advisory covering 3 CVEs
before 9.18.21-5.oe2403
9.18.21-5.oe2403
bind
openEuler:24.03-LTS-SP2
From an advisory covering 3 CVEs
before 9.18.21-5.oe2403sp2
9.18.21-5.oe2403sp2
bind
openEuler:20.03-LTS-SP4
before 9.11.21-22.oe2003sp4
9.11.21-22.oe2003sp4
dhcp
openEuler:24.03-LTS-SP1
before 4.4.3-12.oe2403sp1
4.4.3-12.oe2403sp1
dhcp
openEuler:24.03-LTS-SP2
before 4.4.3-12.oe2403sp2
4.4.3-12.oe2403sp2
dhcp
openEuler:20.03-LTS-SP4
before 4.4.2-16.oe2003sp4
4.4.2-16.oe2003sp4
dhcp
openEuler:22.03-LTS-SP4
before 4.4.3-11.oe2203sp4
4.4.3-11.oe2203sp4
dhcp
openEuler:24.03-LTS
before 4.4.3-13.oe2403
4.4.3-13.oe2403
bind9.16
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-chroot
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-dnssec-utils
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-dnssec-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-license
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-utils
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
python3-bind9.16
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-debugsource
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-dnssec-utils-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-doc
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-libs
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-libs-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind9.16-utils-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
before 32:9.16.23-0.22.el8_10.4
32:9.16.23-0.22.el8_10.4
bind
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-chroot
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-debuginfo
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-debugsource
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-devel
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-export-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-libs
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-libs-lite
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-libs-lite-debuginfo
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-license
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-lite-devel
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-pkcs11
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-pkcs11-debuginfo
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-pkcs11-devel
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-pkcs11-libs
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-pkcs11-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-pkcs11-utils
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-pkcs11-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-sdb
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-sdb-chroot
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-sdb-debuginfo
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-utils
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
python3-bind
Red Hat:enterprise_linux:8::appstream
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind
Red Hat:enterprise_linux:8::baseos
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-debuginfo
Red Hat:enterprise_linux:8::baseos
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-debugsource
Red Hat:enterprise_linux:8::baseos
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-export-devel
Red Hat:enterprise_linux:8::baseos
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-export-libs
Red Hat:enterprise_linux:8::baseos
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-export-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-libs-lite-debuginfo
Red Hat:enterprise_linux:8::baseos
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-pkcs11-debuginfo
Red Hat:enterprise_linux:8::baseos
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-pkcs11-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-pkcs11-utils-debuginfo
Red Hat:enterprise_linux:8::baseos
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-sdb-debuginfo
Red Hat:enterprise_linux:8::baseos
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind-utils-debuginfo
Red Hat:enterprise_linux:8::baseos
before 32:9.11.36-16.el8_10.6
32:9.11.36-16.el8_10.6
bind
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-chroot
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-debugsource
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-dnssec-utils
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-dnssec-utils-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-libs
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-libs-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-license
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-utils
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-utils-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-devel
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind-doc
Red Hat:enterprise_linux:10.0
From an advisory covering 3 CVEs
before 32:9.18.33-4.el10_0.2
32:9.18.33-4.el10_0.2
bind9.18
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-chroot
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.18-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
before 32:9.18.29-4.el9_6.2
32:9.18.29-4.el9_6.2
bind9.16
Rocky Linux:8
From an advisory covering 2 CVEs
before 2:9.16.23-0.22.el8_10.4
2:9.16.23-0.22.el8_10.4
bind
Rocky Linux:8
before 2:9.11.36-16.el8_10.6
2:9.11.36-16.el8_10.6
bind
Rocky Linux:10
From an advisory covering 3 CVEs
before 2:9.18.33-10.el10_1.2
2:9.18.33-10.el10_1.2
bind
Rocky Linux:9
From an advisory covering 2 CVEs
before 2:9.16.23-34.el9_7.1
2:9.16.23-34.el9_7.1
bind9.18
Rocky Linux:9
From an advisory covering 3 CVEs
before 2:9.18.29-5.el9_7.2
2:9.18.29-5.el9_7.2
bind
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 3 CVEs
before 9.20.15-150700.3.12.1
9.20.15-150700.3.12.1
bind
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 3 CVEs
before 9.20.15-150700.3.12.1
9.20.15-150700.3.12.1
bind
SUSE:Linux Enterprise Server 12 SP5-LTSS
before 9.11.22-3.65.1
9.11.22-3.65.1
bind
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
before 9.11.22-3.65.1
9.11.22-3.65.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
before 9.16.50-150400.5.56.1
9.16.50-150400.5.56.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
before 9.16.50-150400.5.56.1
9.16.50-150400.5.56.1
bind
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
before 9.16.50-150400.5.56.1
9.16.50-150400.5.56.1
bind
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
before 9.16.50-150400.5.56.1
9.16.50-150400.5.56.1
bind
SUSE:Manager Proxy LTS 4.3
From an advisory covering 2 CVEs
before 9.16.50-150400.5.56.1
9.16.50-150400.5.56.1
bind
SUSE:Manager Server LTS 4.3
From an advisory covering 2 CVEs
before 9.16.50-150400.5.56.1
9.16.50-150400.5.56.1
bind
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 2 CVEs
before 9.16.50-150500.8.32.1
9.16.50-150500.8.32.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
before 9.16.50-150500.8.32.1
9.16.50-150500.8.32.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
before 9.16.50-150500.8.32.1
9.16.50-150500.8.32.1
bind
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
before 9.16.50-150500.8.32.1
9.16.50-150500.8.32.1
bind
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 2 CVEs
before 9.16.50-150500.8.32.1
9.16.50-150500.8.32.1
bind
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 2 CVEs
before 9.16.6-150300.22.53.1
9.16.6-150300.22.53.1
bind
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 2 CVEs
before 9.16.6-150300.22.53.1
9.16.6-150300.22.53.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 2 CVEs
before 9.16.6-150300.22.53.1
9.16.6-150300.22.53.1
bind
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 2 CVEs
before 9.16.6-150300.22.53.1
9.16.6-150300.22.53.1
bind
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 2 CVEs
before 9.16.6-150300.22.53.1
9.16.6-150300.22.53.1
bind
SUSE:Enterprise Storage 7.1
From an advisory covering 2 CVEs
before 9.16.6-150300.22.53.1
9.16.6-150300.22.53.1
bind
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 3 CVEs
before 9.18.33-150600.3.18.1
9.18.33-150600.3.18.1
bind
SUSE:Linux Enterprise Module for Server Applications 15 SP6
From an advisory covering 3 CVEs
before 9.18.33-150600.3.18.1
9.18.33-150600.3.18.1
bind
openSUSE:Leap 15.6
From an advisory covering 3 CVEs
before 9.18.33-150600.3.18.1
9.18.33-150600.3.18.1
bind
SUSE:Multi Linux Manager Tools SLE-Micro-5
From an advisory covering 2 CVEs
before 9.16.6-150000.12.85.1
9.16.6-150000.12.85.1
bind
SUSE:Manager Client Tools for SLE Micro 5
From an advisory covering 2 CVEs
before 9.16.6-150000.12.85.1
9.16.6-150000.12.85.1
bind
SUSE:Linux Enterprise Server 16.0
From an advisory covering 3 CVEs
before 9.20.15-160000.1.1
9.20.15-160000.1.1
bind
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 3 CVEs
before 9.20.15-160000.1.1
9.20.15-160000.1.1
bind9
Ubuntu:Pro:14.04:LTS
All versions, plus listed versions
1:9.9.3.dfsg.P2-4ubuntu11:9.9.3.dfsg.P2-4ubuntu21:9.9.3.dfsg.P2-4ubuntu31:9.9.5.dfsg-21:9.9.5.dfsg-3
Show 33 moreShow less
1:9.9.5.dfsg-3ubuntu0.11:9.9.5.dfsg-3ubuntu0.21:9.9.5.dfsg-3ubuntu0.31:9.9.5.dfsg-3ubuntu0.41:9.9.5.dfsg-3ubuntu0.51:9.9.5.dfsg-3ubuntu0.61:9.9.5.dfsg-3ubuntu0.71:9.9.5.dfsg-3ubuntu0.81:9.9.5.dfsg-3ubuntu0.91:9.9.5.dfsg-3ubuntu0.101:9.9.5.dfsg-3ubuntu0.111:9.9.5.dfsg-3ubuntu0.121:9.9.5.dfsg-3ubuntu0.131:9.9.5.dfsg-3ubuntu0.141:9.9.5.dfsg-3ubuntu0.151:9.9.5.dfsg-3ubuntu0.161:9.9.5.dfsg-3ubuntu0.171:9.9.5.dfsg-3ubuntu0.181:9.9.5.dfsg-3ubuntu0.191:9.9.5.dfsg-3ubuntu0.19+esm11:9.9.5.dfsg-3ubuntu0.19+esm21:9.9.5.dfsg-3ubuntu0.19+esm31:9.9.5.dfsg-3ubuntu0.19+esm41:9.9.5.dfsg-3ubuntu0.19+esm51:9.9.5.dfsg-3ubuntu0.19+esm61:9.9.5.dfsg-3ubuntu0.19+esm71:9.9.5.dfsg-3ubuntu0.19+esm91:9.9.5.dfsg-3ubuntu0.19+esm101:9.9.5.dfsg-3ubuntu0.19+esm111:9.9.5.dfsg-3ubuntu0.19+esm121:9.9.5.dfsg-3ubuntu0.19+esm131:9.9.5.dfsg-3ubuntu0.19+esm141:9.9.5.dfsg-3ubuntu0.19+esm15
None known
bind9
Ubuntu:Pro:16.04:LTS
All versions, plus listed versions
1:9.9.5.dfsg-11ubuntu11:9.9.5.dfsg-121:9.9.5.dfsg-12.11:9.9.5.dfsg-12.1ubuntu11:9.10.3.dfsg.P2-4
Show 34 moreShow less
1:9.10.3.dfsg.P2-51:9.10.3.dfsg.P4-31:9.10.3.dfsg.P4-41:9.10.3.dfsg.P4-51:9.10.3.dfsg.P4-81:9.10.3.dfsg.P4-8ubuntu11:9.10.3.dfsg.P4-8ubuntu1.11:9.10.3.dfsg.P4-8ubuntu1.21:9.10.3.dfsg.P4-8ubuntu1.31:9.10.3.dfsg.P4-8ubuntu1.41:9.10.3.dfsg.P4-8ubuntu1.51:9.10.3.dfsg.P4-8ubuntu1.61:9.10.3.dfsg.P4-8ubuntu1.71:9.10.3.dfsg.P4-8ubuntu1.81:9.10.3.dfsg.P4-8ubuntu1.91:9.10.3.dfsg.P4-8ubuntu1.101:9.10.3.dfsg.P4-8ubuntu1.111:9.10.3.dfsg.P4-8ubuntu1.121:9.10.3.dfsg.P4-8ubuntu1.141:9.10.3.dfsg.P4-8ubuntu1.151:9.10.3.dfsg.P4-8ubuntu1.161:9.10.3.dfsg.P4-8ubuntu1.171:9.10.3.dfsg.P4-8ubuntu1.181:9.10.3.dfsg.P4-8ubuntu1.191:9.10.3.dfsg.P4-8ubuntu1.19+esm11:9.10.3.dfsg.P4-8ubuntu1.19+esm21:9.10.3.dfsg.P4-8ubuntu1.19+esm31:9.10.3.dfsg.P4-8ubuntu1.19+esm51:9.10.3.dfsg.P4-8ubuntu1.19+esm61:9.10.3.dfsg.P4-8ubuntu1.19+esm71:9.10.3.dfsg.P4-8ubuntu1.19+esm81:9.10.3.dfsg.P4-8ubuntu1.19+esm91:9.10.3.dfsg.P4-8ubuntu1.19+esm101:9.10.3.dfsg.P4-8ubuntu1.19+esm11
None known
bind9
Ubuntu:Pro:18.04:LTS
before 1:9.11.3+dfsg-1ubuntu1.19+esm6, plus listed versions
1:9.10.3.dfsg.P4-12.6ubuntu11:9.11.2.P1-1ubuntu21:9.11.2.P1-1ubuntu31:9.11.2.P1-1ubuntu41:9.11.2.P1-1ubuntu5
Show 22 moreShow less
1:9.11.3+dfsg-1ubuntu11:9.11.3+dfsg-1ubuntu1.11:9.11.3+dfsg-1ubuntu1.21:9.11.3+dfsg-1ubuntu1.31:9.11.3+dfsg-1ubuntu1.51:9.11.3+dfsg-1ubuntu1.71:9.11.3+dfsg-1ubuntu1.81:9.11.3+dfsg-1ubuntu1.91:9.11.3+dfsg-1ubuntu1.101:9.11.3+dfsg-1ubuntu1.111:9.11.3+dfsg-1ubuntu1.121:9.11.3+dfsg-1ubuntu1.131:9.11.3+dfsg-1ubuntu1.141:9.11.3+dfsg-1ubuntu1.151:9.11.3+dfsg-1ubuntu1.161:9.11.3+dfsg-1ubuntu1.171:9.11.3+dfsg-1ubuntu1.181:9.11.3+dfsg-1ubuntu1.19+esm11:9.11.3+dfsg-1ubuntu1.19+esm21:9.11.3+dfsg-1ubuntu1.19+esm31:9.11.3+dfsg-1ubuntu1.19+esm41:9.11.3+dfsg-1ubuntu1.19+esm5
1:9.11.3+dfsg-1ubuntu1.19+esm6
isc-dhcp
Ubuntu:18.04:LTS
All versions, plus listed versions
4.3.5-3ubuntu24.3.5-3ubuntu34.3.5-3ubuntu44.3.5-3ubuntu54.3.5-3ubuntu6
Show 5 moreShow less
4.3.5-3ubuntu74.3.5-3ubuntu7.14.3.5-3ubuntu7.24.3.5-3ubuntu7.34.3.5-3ubuntu7.4
None known
bind9
Ubuntu:Pro:20.04:LTS
before 1:9.18.30-0ubuntu0.20.04.2+esm1, plus listed versions
1:9.11.5.P4+dfsg-5.1ubuntu21:9.11.5.P4+dfsg-5.1ubuntu31:9.11.5.P4+dfsg-5.1ubuntu41:9.11.5.P4+dfsg-5.1ubuntu51:9.11.14+dfsg-1ubuntu1
Show 24 moreShow less
1:9.11.14+dfsg-3ubuntu11:9.16.0-1ubuntu31:9.16.0-1ubuntu41:9.16.0-1ubuntu51:9.16.1-0ubuntu11:9.16.1-0ubuntu21:9.16.1-0ubuntu2.11:9.16.1-0ubuntu2.21:9.16.1-0ubuntu2.31:9.16.1-0ubuntu2.41:9.16.1-0ubuntu2.61:9.16.1-0ubuntu2.71:9.16.1-0ubuntu2.81:9.16.1-0ubuntu2.91:9.16.1-0ubuntu2.101:9.16.1-0ubuntu2.111:9.16.1-0ubuntu2.121:9.16.1-0ubuntu2.141:9.16.1-0ubuntu2.151:9.16.1-0ubuntu2.161:9.16.48-0ubuntu0.20.04.11:9.18.28-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.2
1:9.18.30-0ubuntu0.20.04.2+esm1
bind9-libs
Ubuntu:20.04:LTS
All versions, plus listed versions
1:9.11.16+dfsg-3~build11:9.11.16+dfsg-3~ubuntu1
None known
bind9
Ubuntu:22.04:LTS
before 1:9.18.39-0ubuntu0.22.04.2, plus listed versions
1:9.16.15-1ubuntu11:9.16.15-1ubuntu21:9.16.15-1ubuntu31:9.18.0-2ubuntu11:9.18.0-2ubuntu2
Show 15 moreShow less
1:9.18.0-2ubuntu31:9.18.1-1ubuntu11:9.18.1-1ubuntu1.11:9.18.1-1ubuntu1.21:9.18.1-1ubuntu1.31:9.18.12-0ubuntu0.22.04.11:9.18.12-0ubuntu0.22.04.21:9.18.12-0ubuntu0.22.04.31:9.18.18-0ubuntu0.22.04.11:9.18.18-0ubuntu0.22.04.21:9.18.24-0ubuntu0.22.04.11:9.18.28-0ubuntu0.22.04.11:9.18.30-0ubuntu0.22.04.11:9.18.30-0ubuntu0.22.04.21:9.18.39-0ubuntu0.22.04.1
1:9.18.39-0ubuntu0.22.04.2
bind9-libs
Ubuntu:22.04:LTS
All versions, plus listed versions
1:9.11.19+dfsg-2.1ubuntu11:9.11.19+dfsg-2.1ubuntu21:9.11.19+dfsg-2.1ubuntu3
None known
bind9
Ubuntu:24.04:LTS
before 1:9.18.39-0ubuntu0.24.04.2, plus listed versions
1:9.18.18-0ubuntu21:9.18.21-0ubuntu11:9.18.24-0ubuntu31:9.18.24-0ubuntu41:9.18.24-0ubuntu5
Show 4 moreShow less
1:9.18.28-0ubuntu0.24.04.11:9.18.30-0ubuntu0.24.04.11:9.18.30-0ubuntu0.24.04.21:9.18.39-0ubuntu0.24.04.1
1:9.18.39-0ubuntu0.24.04.2
isc-dhcp
Ubuntu:24.04:LTS
All versions, plus listed versions
4.4.3-P1-2ubuntu54.4.3-P1-4ubuntu14.4.3-P1-4ubuntu2
None known
bind9
Ubuntu:25.10
before 1:9.20.11-1ubuntu2.1, plus listed versions
1:9.20.4-3ubuntu11:9.20.4-3ubuntu21:9.20.4-3ubuntu31:9.20.9-2ubuntu11:9.20.10-1ubuntu11:9.20.11-1ubuntu11:9.20.11-1ubuntu2
1:9.20.11-1ubuntu2.1
isc-dhcp
Ubuntu:25.10
All versions, plus listed versions
4.4.3-P1-4ubuntu2
None known
bind9
Ubuntu:26.04:LTS
before 1:9.20.11-1ubuntu3, plus listed versions
1:9.20.11-1ubuntu2
1:9.20.11-1ubuntu3
isc-dhcp
Ubuntu:26.04:LTS
All versions, plus listed versions
4.4.3-P1-4ubuntu2
None known
bind9
Ubuntu:22.04:LTS
From an advisory covering 3 CVEs
before 1:9.18.39-0ubuntu0.22.04.2, plus listed versions
1:9.16.15-1ubuntu11:9.16.15-1ubuntu21:9.16.15-1ubuntu31:9.18.0-2ubuntu11:9.18.0-2ubuntu2
Show 15 moreShow less
1:9.18.0-2ubuntu31:9.18.1-1ubuntu11:9.18.1-1ubuntu1.11:9.18.1-1ubuntu1.21:9.18.1-1ubuntu1.31:9.18.12-0ubuntu0.22.04.11:9.18.12-0ubuntu0.22.04.21:9.18.12-0ubuntu0.22.04.31:9.18.18-0ubuntu0.22.04.11:9.18.18-0ubuntu0.22.04.21:9.18.24-0ubuntu0.22.04.11:9.18.28-0ubuntu0.22.04.11:9.18.30-0ubuntu0.22.04.11:9.18.30-0ubuntu0.22.04.21:9.18.39-0ubuntu0.22.04.1
1:9.18.39-0ubuntu0.22.04.2
bind9
Ubuntu:24.04:LTS
From an advisory covering 3 CVEs
before 1:9.18.39-0ubuntu0.24.04.2, plus listed versions
1:9.18.18-0ubuntu21:9.18.21-0ubuntu11:9.18.24-0ubuntu31:9.18.24-0ubuntu41:9.18.24-0ubuntu5
Show 4 moreShow less
1:9.18.28-0ubuntu0.24.04.11:9.18.30-0ubuntu0.24.04.11:9.18.30-0ubuntu0.24.04.21:9.18.39-0ubuntu0.24.04.1
1:9.18.39-0ubuntu0.24.04.2
bind9
Ubuntu:25.10
From an advisory covering 3 CVEs
before 1:9.20.11-1ubuntu2.1, plus listed versions
1:9.20.4-3ubuntu11:9.20.4-3ubuntu21:9.20.4-3ubuntu31:9.20.9-2ubuntu11:9.20.10-1ubuntu11:9.20.11-1ubuntu11:9.20.11-1ubuntu2
1:9.20.11-1ubuntu2.1
bind9
Ubuntu:Pro:20.04:LTS
From an advisory covering 3 CVEs
before 1:9.18.30-0ubuntu0.20.04.2+esm1, plus listed versions
1:9.11.5.P4+dfsg-5.1ubuntu21:9.11.5.P4+dfsg-5.1ubuntu31:9.11.5.P4+dfsg-5.1ubuntu41:9.11.5.P4+dfsg-5.1ubuntu51:9.11.14+dfsg-1ubuntu1
Show 24 moreShow less
1:9.11.14+dfsg-3ubuntu11:9.16.0-1ubuntu31:9.16.0-1ubuntu41:9.16.0-1ubuntu51:9.16.1-0ubuntu11:9.16.1-0ubuntu21:9.16.1-0ubuntu2.11:9.16.1-0ubuntu2.21:9.16.1-0ubuntu2.31:9.16.1-0ubuntu2.41:9.16.1-0ubuntu2.61:9.16.1-0ubuntu2.71:9.16.1-0ubuntu2.81:9.16.1-0ubuntu2.91:9.16.1-0ubuntu2.101:9.16.1-0ubuntu2.111:9.16.1-0ubuntu2.121:9.16.1-0ubuntu2.141:9.16.1-0ubuntu2.151:9.16.1-0ubuntu2.161:9.16.48-0ubuntu0.20.04.11:9.18.28-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.2
1:9.18.30-0ubuntu0.20.04.2+esm1
bind9
Ubuntu:Pro:14.04:LTS
From an advisory covering 24 CVEs
before 1:9.9.5.dfsg-3ubuntu0.19+esm15, plus listed versions
1:9.9.3.dfsg.P2-4ubuntu11:9.9.3.dfsg.P2-4ubuntu21:9.9.3.dfsg.P2-4ubuntu31:9.9.5.dfsg-21:9.9.5.dfsg-3
Show 32 moreShow less
1:9.9.5.dfsg-3ubuntu0.11:9.9.5.dfsg-3ubuntu0.21:9.9.5.dfsg-3ubuntu0.31:9.9.5.dfsg-3ubuntu0.41:9.9.5.dfsg-3ubuntu0.51:9.9.5.dfsg-3ubuntu0.61:9.9.5.dfsg-3ubuntu0.71:9.9.5.dfsg-3ubuntu0.81:9.9.5.dfsg-3ubuntu0.91:9.9.5.dfsg-3ubuntu0.101:9.9.5.dfsg-3ubuntu0.111:9.9.5.dfsg-3ubuntu0.121:9.9.5.dfsg-3ubuntu0.131:9.9.5.dfsg-3ubuntu0.141:9.9.5.dfsg-3ubuntu0.151:9.9.5.dfsg-3ubuntu0.161:9.9.5.dfsg-3ubuntu0.171:9.9.5.dfsg-3ubuntu0.181:9.9.5.dfsg-3ubuntu0.191:9.9.5.dfsg-3ubuntu0.19+esm11:9.9.5.dfsg-3ubuntu0.19+esm21:9.9.5.dfsg-3ubuntu0.19+esm31:9.9.5.dfsg-3ubuntu0.19+esm41:9.9.5.dfsg-3ubuntu0.19+esm51:9.9.5.dfsg-3ubuntu0.19+esm61:9.9.5.dfsg-3ubuntu0.19+esm71:9.9.5.dfsg-3ubuntu0.19+esm91:9.9.5.dfsg-3ubuntu0.19+esm101:9.9.5.dfsg-3ubuntu0.19+esm111:9.9.5.dfsg-3ubuntu0.19+esm121:9.9.5.dfsg-3ubuntu0.19+esm131:9.9.5.dfsg-3ubuntu0.19+esm14
1:9.9.5.dfsg-3ubuntu0.19+esm15
bind9
Ubuntu:Pro:16.04:LTS
From an advisory covering 24 CVEs
before 1:9.10.3.dfsg.P4-8ubuntu1.19+esm11, plus listed versions
1:9.9.5.dfsg-11ubuntu11:9.9.5.dfsg-121:9.9.5.dfsg-12.11:9.9.5.dfsg-12.1ubuntu11:9.10.3.dfsg.P2-4
Show 33 moreShow less
1:9.10.3.dfsg.P2-51:9.10.3.dfsg.P4-31:9.10.3.dfsg.P4-41:9.10.3.dfsg.P4-51:9.10.3.dfsg.P4-81:9.10.3.dfsg.P4-8ubuntu11:9.10.3.dfsg.P4-8ubuntu1.11:9.10.3.dfsg.P4-8ubuntu1.21:9.10.3.dfsg.P4-8ubuntu1.31:9.10.3.dfsg.P4-8ubuntu1.41:9.10.3.dfsg.P4-8ubuntu1.51:9.10.3.dfsg.P4-8ubuntu1.61:9.10.3.dfsg.P4-8ubuntu1.71:9.10.3.dfsg.P4-8ubuntu1.81:9.10.3.dfsg.P4-8ubuntu1.91:9.10.3.dfsg.P4-8ubuntu1.101:9.10.3.dfsg.P4-8ubuntu1.111:9.10.3.dfsg.P4-8ubuntu1.121:9.10.3.dfsg.P4-8ubuntu1.141:9.10.3.dfsg.P4-8ubuntu1.151:9.10.3.dfsg.P4-8ubuntu1.161:9.10.3.dfsg.P4-8ubuntu1.171:9.10.3.dfsg.P4-8ubuntu1.181:9.10.3.dfsg.P4-8ubuntu1.191:9.10.3.dfsg.P4-8ubuntu1.19+esm11:9.10.3.dfsg.P4-8ubuntu1.19+esm21:9.10.3.dfsg.P4-8ubuntu1.19+esm31:9.10.3.dfsg.P4-8ubuntu1.19+esm51:9.10.3.dfsg.P4-8ubuntu1.19+esm61:9.10.3.dfsg.P4-8ubuntu1.19+esm71:9.10.3.dfsg.P4-8ubuntu1.19+esm81:9.10.3.dfsg.P4-8ubuntu1.19+esm91:9.10.3.dfsg.P4-8ubuntu1.19+esm10
1:9.10.3.dfsg.P4-8ubuntu1.19+esm11
bind9
Ubuntu:Pro:18.04:LTS
From an advisory covering 24 CVEs
before 1:9.11.3+dfsg-1ubuntu1.19+esm6, plus listed versions
1:9.10.3.dfsg.P4-12.6ubuntu11:9.11.2.P1-1ubuntu21:9.11.2.P1-1ubuntu31:9.11.2.P1-1ubuntu41:9.11.2.P1-1ubuntu5
Show 22 moreShow less
1:9.11.3+dfsg-1ubuntu11:9.11.3+dfsg-1ubuntu1.11:9.11.3+dfsg-1ubuntu1.21:9.11.3+dfsg-1ubuntu1.31:9.11.3+dfsg-1ubuntu1.51:9.11.3+dfsg-1ubuntu1.71:9.11.3+dfsg-1ubuntu1.81:9.11.3+dfsg-1ubuntu1.91:9.11.3+dfsg-1ubuntu1.101:9.11.3+dfsg-1ubuntu1.111:9.11.3+dfsg-1ubuntu1.121:9.11.3+dfsg-1ubuntu1.131:9.11.3+dfsg-1ubuntu1.141:9.11.3+dfsg-1ubuntu1.151:9.11.3+dfsg-1ubuntu1.161:9.11.3+dfsg-1ubuntu1.171:9.11.3+dfsg-1ubuntu1.181:9.11.3+dfsg-1ubuntu1.19+esm11:9.11.3+dfsg-1ubuntu1.19+esm21:9.11.3+dfsg-1ubuntu1.19+esm31:9.11.3+dfsg-1ubuntu1.19+esm41:9.11.3+dfsg-1ubuntu1.19+esm5
1:9.11.3+dfsg-1ubuntu1.19+esm6
bind9
Ubuntu:Pro:20.04:LTS
From an advisory covering 24 CVEs
before 1:9.18.30-0ubuntu0.20.04.2+esm3, plus listed versions
1:9.11.5.P4+dfsg-5.1ubuntu21:9.11.5.P4+dfsg-5.1ubuntu31:9.11.5.P4+dfsg-5.1ubuntu41:9.11.5.P4+dfsg-5.1ubuntu51:9.11.14+dfsg-1ubuntu1
Show 26 moreShow less
1:9.11.14+dfsg-3ubuntu11:9.16.0-1ubuntu31:9.16.0-1ubuntu41:9.16.0-1ubuntu51:9.16.1-0ubuntu11:9.16.1-0ubuntu21:9.16.1-0ubuntu2.11:9.16.1-0ubuntu2.21:9.16.1-0ubuntu2.31:9.16.1-0ubuntu2.41:9.16.1-0ubuntu2.61:9.16.1-0ubuntu2.71:9.16.1-0ubuntu2.81:9.16.1-0ubuntu2.91:9.16.1-0ubuntu2.101:9.16.1-0ubuntu2.111:9.16.1-0ubuntu2.121:9.16.1-0ubuntu2.141:9.16.1-0ubuntu2.151:9.16.1-0ubuntu2.161:9.16.48-0ubuntu0.20.04.11:9.18.28-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.21:9.18.30-0ubuntu0.20.04.2+esm11:9.18.30-0ubuntu0.20.04.2+esm2
1:9.18.30-0ubuntu0.20.04.2+esm3
bind9
Ubuntu:22.04:LTS
From an advisory covering 24 CVEs
before 1:9.18.39-0ubuntu0.22.04.7, plus listed versions
1:9.16.15-1ubuntu11:9.16.15-1ubuntu21:9.16.15-1ubuntu31:9.18.0-2ubuntu11:9.18.0-2ubuntu2
Show 20 moreShow less
1:9.18.0-2ubuntu31:9.18.1-1ubuntu11:9.18.1-1ubuntu1.11:9.18.1-1ubuntu1.21:9.18.1-1ubuntu1.31:9.18.12-0ubuntu0.22.04.11:9.18.12-0ubuntu0.22.04.21:9.18.12-0ubuntu0.22.04.31:9.18.18-0ubuntu0.22.04.11:9.18.18-0ubuntu0.22.04.21:9.18.24-0ubuntu0.22.04.11:9.18.28-0ubuntu0.22.04.11:9.18.30-0ubuntu0.22.04.11:9.18.30-0ubuntu0.22.04.21:9.18.39-0ubuntu0.22.04.11:9.18.39-0ubuntu0.22.04.21:9.18.39-0ubuntu0.22.04.31:9.18.39-0ubuntu0.22.04.41:9.18.39-0ubuntu0.22.04.51:9.18.39-0ubuntu0.22.04.6
1:9.18.39-0ubuntu0.22.04.7
bind9
Ubuntu:24.04:LTS
From an advisory covering 24 CVEs
before 1:9.18.39-0ubuntu0.24.04.8, plus listed versions
1:9.18.18-0ubuntu21:9.18.21-0ubuntu11:9.18.24-0ubuntu31:9.18.24-0ubuntu41:9.18.24-0ubuntu5
Show 9 moreShow less
1:9.18.28-0ubuntu0.24.04.11:9.18.30-0ubuntu0.24.04.11:9.18.30-0ubuntu0.24.04.21:9.18.39-0ubuntu0.24.04.11:9.18.39-0ubuntu0.24.04.21:9.18.39-0ubuntu0.24.04.31:9.18.39-0ubuntu0.24.04.51:9.18.39-0ubuntu0.24.04.61:9.18.39-0ubuntu0.24.04.7
1:9.18.39-0ubuntu0.24.04.8
bind9
Ubuntu:26.04:LTS
From an advisory covering 24 CVEs
before 1:9.20.24-1ubuntu0.4, plus listed versions
1:9.20.11-1ubuntu21:9.20.11-1ubuntu31:9.20.18-1ubuntu11:9.20.18-1ubuntu21:9.20.18-1ubuntu2.11:9.20.24-1ubuntu0.11:9.20.24-1ubuntu0.21:9.20.24-1ubuntu0.3
1:9.20.24-1ubuntu0.4
bind
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
before 9.20.15-1.1
9.20.15-1.1
bind
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
before 9.20.15-160000.1.1
9.20.15-160000.1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubnehkark/CVE-2025-407782025-10-29
PoC in GitHubsirbuvladste/BIND-9-Cache-Poisoning-PoC---CVE-2025-407782026-01-09
PoC in GitHubnicholasC03/DNS-Poisoning-Triage-Lab2026-02-04

History

History
RecordedChangedSources
affected
exploits, facts
affected, aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-40778 is a high vulnerability (CVSS 8.6) in Isc Bind 9, published October 22, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.67%, the 52nd percentile. Fixed in bind 9.18.41-r0.

References

Show 180 moreShow less
This page doesn't list everything

Left out here: 454 package rows. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 26 source records.

MoveEnter Open