Skip to content
OpenAdvisories

Weakness (CWE)

CWE-232: Improper Handling of Undefined Values

Variant Draft

The product does not handle or incorrectly handles when a value is not defined or supported for the associated parameter, field, or argument name.

Source: MITRE CWE-232

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-40775 Public exploit EPSS 15%

    DNS message with invalid TSIG causes an assertion failure

    When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND always checks it. If the TSIG contains an invalid value in the algorithm field, BIND immediately aborts with an assertion failure. This issue affects BIND 9 versions 9.20.0 th…

    ISC BIND 9 bind9 bind Debian Alpine