Skip to content
OpenAdvisories
Medium ALAS2-2025-3093 1 CVE

Moderate: bind security update (Amazon Linux 2)

Published Dec 8, 2025 · Updated Dec 8, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-40778: Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Fixed packages 17

ReleasePackageFixed in
Amazon Linux · 2 bind 32:9.11.4-26.P2.amzn2.13.13
Amazon Linux · 2 bind-chroot 32:9.11.4-26.P2.amzn2.13.13
Amazon Linux · 2 bind-debuginfo 32:9.11.4-26.P2.amzn2.13.13
Amazon Linux · 2 bind-devel 32:9.11.4-26.P2.amzn2.13.13
Amazon Linux · 2 bind-export-devel 32:9.11.4-26.P2.amzn2.13.13
Amazon Linux · 2 bind-export-libs 32:9.11.4-26.P2.amzn2.13.13
Amazon Linux · 2 bind-libs 32:9.11.4-26.P2.amzn2.13.13
Amazon Linux · 2 bind-libs-lite 32:9.11.4-26.P2.amzn2.13.13
Amazon Linux · 2 bind-license 32:9.11.4-26.P2.amzn2.13.13
Amazon Linux · 2 bind-lite-devel 32:9.11.4-26.P2.amzn2.13.13
Amazon Linux · 2 bind-pkcs11 32:9.11.4-26.P2.amzn2.13.13
Amazon Linux · 2 bind-pkcs11-devel 32:9.11.4-26.P2.amzn2.13.13
Amazon Linux · 2 bind-pkcs11-libs 32:9.11.4-26.P2.amzn2.13.13
Amazon Linux · 2 bind-pkcs11-utils 32:9.11.4-26.P2.amzn2.13.13
Amazon Linux · 2 bind-sdb 32:9.11.4-26.P2.amzn2.13.13
Amazon Linux · 2 bind-sdb-chroot 32:9.11.4-26.P2.amzn2.13.13
Amazon Linux · 2 bind-utils 32:9.11.4-26.P2.amzn2.13.13

Vulnerabilities 1

  • High 8.6
    CVE-2025-40778 Public exploit

    Cache poisoning attacks with unsolicited RRs

    Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 …

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-40778.html