Skip to content
OpenAdvisories
High USN-7641-1 1 CVE

bind9 vulnerability

Published Jul 16, 2025 · Updated Oct 13, 2025

Ecosystem: Ubuntu

Summary

It was discovered that Bind incorrectly handled configurations where the
stale-answer-client-timeout option is set to 0. A remote attacker could
possibly use this issue to cause Bind to crash, resulting in a denial of
service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 25.04 bind9 1:9.20.4-3ubuntu1.2

Vulnerabilities 1

  • High 7.5
    CVE-2025-40777

    A possible assertion failure when 'stale-answer-client-timeout' is set to '0'

    If a `named` caching resolver is configured with `serve-stale-enable` `yes`, and with `stale-answer-client-timeout` set to `0` (the only allowable value other than `disabled`), and if the resolver, in the process of resolving a query, encounters a CNAME chain…

    ISC BIND 9 bind9 bind Debian Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2025-40777