CVE-2025-40780 - CVE House
Back to Database
Status published High CVE-2025-40780

Cache poisoning due to weak PRNG

Vulnerability Description

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-40780

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • ISC would like to thank Prof. Amit Klein and Omer Ben Simhon from Hebrew University of Jerusalem for bringing this vulnerability to our attention.

References

More from ISC

View All →
CVE-2025-8696
DoS attack against the Stork UI from an unauthenticated user
High 7.5
CVE-2025-8677
Resource exhaustion via malformed DNSKEY handling
High 7.5
CVE-2025-40779
Kea crash upon interaction between specific client options and subnet selection
High 7.5
CVE-2025-40778
Cache poisoning attacks with unsolicited RRs
High 8.6
CVE-2025-40777
A possible assertion failure when 'stale-answer-client-timeout' is set to '0'
High 7.5

Affected Vendor

Affected Software

BIND 9
Vulnerable Versions:
9.16.0, 9.18.0, 9.20.0, 9.21.0, 9.16.8-S1, 9.18.11-S1, 9.20.9-S1

Timeline

Official Publish: October 22nd, 2025
Last Modified: November 4th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Weaknesses (CWE)

CWE-341

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.