Skip to content
OpenAdvisories
High USN-7526-1 1 CVE

bind9 vulnerability

Published May 21, 2025 · Updated Oct 13, 2025

Ecosystem: Ubuntu

Summary

It was discovered that Bind incorrectly handled certain DNS messages with
invalid TSIG. A remote attacker could possibly use this issue to cause Bind
to crash, resulting in a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 25.04 bind9 1:9.20.4-3ubuntu1.1

Vulnerabilities 1

  • High 7.5
    CVE-2025-40775 Public exploit EPSS 15%

    DNS message with invalid TSIG causes an assertion failure

    When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND always checks it. If the TSIG contains an invalid value in the algorithm field, BIND immediately aborts with an assertion failure. This issue affects BIND 9 versions 9.20.0 th…

    ISC BIND 9 bind9 bind Debian Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2025-40775