Skip to content
OpenAdvisories
Medium WID-SEC-2025-1585 2 CVEs

Internet Systems Consortium BIND: Mehrere Schwachstellen

Published Jul 16, 2025 · Updated Jul 17, 2025 · Revision 2 · de-DE

Vendor: Internet Systems Consortium Vendor: SUSE Product: BIND Product: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um einen Denial of Service Angriff durchzuführen und Daten zu manipulieren.

Product

BIND (Berkeley Internet Name Domain) ist ein Open-Source-Softwarepaket, das einen Domain-Name-System-Server implementiert.

Vulnerabilities 2

  • High 8.6
    CVE-2025-40776

    Birthday Attack against Resolvers supporting ECS

    A `named` caching resolver that is configured to send ECS (EDNS Client Subnet) options may be vulnerable to a cache-poisoning attack. This issue affects BIND 9 versions 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.37-S1, and 9.20.9-S1 through 9.20.10…

    ISC BIND 9 bind Alpine
  • High 7.5
    CVE-2025-40777

    A possible assertion failure when 'stale-answer-client-timeout' is set to '0'

    If a `named` caching resolver is configured with `serve-stale-enable` `yes`, and with `stale-answer-client-timeout` set to `0` (the only allowable value other than `disabled`), and if the resolver, in the process of resolving a query, encounters a CNAME chain…

    ISC BIND 9 bind9 bind Debian Azure Linux Alpine

Revision history

  1. #2

    Neue Updates von SUSE aufgenommen

  2. #1

    Initiale Fassung

References