CVE-2025-40780

NameCVE-2025-40780
DescriptionIn specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDSA-6033-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
bind9 (PTS)bullseye1:9.16.50-1~deb11u2vulnerable
bullseye (security)1:9.16.50-1~deb11u3vulnerable
bookworm1:9.18.33-1~deb12u2vulnerable
bookworm (security)1:9.18.41-1~deb12u1fixed
trixie1:9.20.11-4vulnerable
trixie (security)1:9.20.15-1~deb13u1fixed
forky, sid1:9.20.15-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
bind9sourcebookworm1:9.18.41-1~deb12u1DSA-6033-1
bind9sourcetrixie1:9.20.15-1~deb13u1DSA-6033-1
bind9source(unstable)1:9.20.15-1

Notes

https://kb.isc.org/docs/cve-2025-40780
Fixed by: https://gitlab.isc.org/isc-projects/bind9/-/commit/2924910eeea5c86720149bc48d799ccb69e59797 (v9.20.15)
Fixed by: https://gitlab.isc.org/isc-projects/bind9/-/commit/26c77915d52a577be6f421fd351506c29185ab97 (v9.20.15)
Fixed by: https://gitlab.isc.org/isc-projects/bind9/-/commit/8330b49fb90bfeae14b47b7983e9459cc2bbaffe (v9.18.41)

Search for package or bug name: Reporting problems