Beveiligingsadvies

CVE-2025-40776

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-07-16 13:41:01
Laatst bijgewerkt 2025-07-22 14:55:04
Toegewezen door isc
CVSS-score 8.6
Status PUBLISHED

Beschrijving

A `named` caching resolver that is configured to send ECS (EDNS Client Subnet) options may be vulnerable to a cache-poisoning attack. This issue affects BIND 9 versions 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.37-S1, and 9.20.9-S1 through 9.20.10-S1.