Summary
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.
Security Fix(es):
* bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | bind | 32:9.11.36-16.el8_10.6 |
| AlmaLinux · 8 | bind-chroot | 32:9.11.36-16.el8_10.6 |
| AlmaLinux · 8 | bind-devel | 32:9.11.36-16.el8_10.6 |
| AlmaLinux · 8 | bind-export-devel | 32:9.11.36-16.el8_10.6 |
| AlmaLinux · 8 | bind-export-libs | 32:9.11.36-16.el8_10.6 |
| AlmaLinux · 8 | bind-libs | 32:9.11.36-16.el8_10.6 |
| AlmaLinux · 8 | bind-libs-lite | 32:9.11.36-16.el8_10.6 |
| AlmaLinux · 8 | bind-license | 32:9.11.36-16.el8_10.6 |
| AlmaLinux · 8 | bind-lite-devel | 32:9.11.36-16.el8_10.6 |
| AlmaLinux · 8 | bind-pkcs11 | 32:9.11.36-16.el8_10.6 |
| AlmaLinux · 8 | bind-pkcs11-devel | 32:9.11.36-16.el8_10.6 |
| AlmaLinux · 8 | bind-pkcs11-libs | 32:9.11.36-16.el8_10.6 |
| AlmaLinux · 8 | bind-pkcs11-utils | 32:9.11.36-16.el8_10.6 |
| AlmaLinux · 8 | bind-sdb | 32:9.11.36-16.el8_10.6 |
| AlmaLinux · 8 | bind-sdb-chroot | 32:9.11.36-16.el8_10.6 |
| AlmaLinux · 8 | bind-utils | 32:9.11.36-16.el8_10.6 |
| AlmaLinux · 8 | python3-bind | 32:9.11.36-16.el8_10.6 |
Vulnerabilities 1
-
High 8.6CVE-2025-40778 Public exploit
Cache poisoning attacks with unsolicited RRs
Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 …