https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:17:18.054692+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:19793 ALSA-2025:19793 — Important: bind9.16 security update 2026-10-03T03:17:18.129858+00:00

Affected: AlmaLinux:8: bind9.16, AlmaLinux:8: bind9.16-chroot, AlmaLinux:8: bind9.16-devel, AlmaLinux:8: bind9.16-dnssec-utils, AlmaLinux:8: bind9.16-doc, AlmaLinux:8: bind9.16-libs, AlmaLinux:8: bind9.16-license, AlmaLinux:8: bind9.16-utils, AlmaLinux:8: python3-bind9.16

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: Cache poisoning attacks with unsolicited RRs (CVE-2025-40778) * bind: Cache poisoning due to weak PRNG (CVE-2025-40780)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-13637 bdu:2025-13637 2026-10-03T03:17:18.129953+00:00 bdu:2025-13637 https://cve.radiocsirt.org/vuln/bell-cve-2025-40778 BELL-CVE-2025-40778 2026-10-03T03:17:18.129972+00:00

Affected: Alpaquita:23: bind, Alpaquita:25: bind, Alpaquita:stream: bind

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0913 certfr-2025-avi-0913 — De multiples vulnérabilités ont été découvertes dans ISC BIND. Elles permettent à un attaquant de provoquer un déni de… 2026-10-03T03:17:18.129995+00:00 certfr-2025-avi-0913 https://cve.radiocsirt.org/vuln/cnvd-2025-26736 cnvd-2025-26736 2026-10-03T03:17:18.130012+00:00 cnvd-2025-26736 https://cve.radiocsirt.org/vuln/euvd-2026-271438 EUVD-2026-271438 2026-10-03T03:17:18.130025+00:00 EUVD-2026-271438 https://cve.radiocsirt.org/vuln/fkie_cve-2025-40778 fkie_cve-2025-40778 2026-10-03T03:17:18.130035+00:00

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

 https://cve.radiocsirt.org/vuln/ghsa-xmqp-6cj2-2hh3 GHSA-xmqp-6cj2-2hh3 2026-10-03T03:17:18.130058+00:00

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-40778 msrc_CVE-2025-40778 — Cache poisoning attacks with unsolicited RRs 2026-10-03T03:17:18.130073+00:00 msrc_CVE-2025-40778 https://cve.radiocsirt.org/vuln/oesa-2025-2653 OESA-2025-2653 — bind security update 2026-10-03T03:17:18.130090+00:00

Affected: openEuler:22.03-LTS-SP3: bind

Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server. Security Fix(es):

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40778)

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.(CVE-2025-40780)

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15659-1 openSUSE-SU-2025:15659-1 — bind-9.20.15-1.1 on GA media 2026-10-03T03:17:18.130118+00:00

bind-9.20.15-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2025:19912 RHSA-2025:19912 — Red Hat Security Advisory: bind security update 2026-10-03T03:17:18.130136+00:00

bind: Resource exhaustion via malformed DNSKEY handling bind: Cache poisoning attacks with unsolicited RRs bind: Cache poisoning due to weak PRNG

 https://cve.radiocsirt.org/vuln/suse-su-2025:3976-1 SUSE-SU-2025:3976-1 — Security update for bind 2026-10-03T03:17:18.130157+00:00

Security update for bind

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-40778 UBUNTU-CVE-2025-40778 2026-10-03T03:17:18.130171+00:00

Affected: Ubuntu:Pro:14.04:LTS: bind9, Ubuntu:Pro:16.04:LTS: bind9, Ubuntu:Pro:18.04:LTS: bind9, Ubuntu:18.04:LTS: isc-dhcp, Ubuntu:Pro:20.04:LTS: bind9, Ubuntu:20.04:LTS: bind9-libs, Ubuntu:22.04:LTS: bind9, Ubuntu:22.04:LTS: bind9-libs, Ubuntu:24.04:LTS: bind9, Ubuntu:24.04:LTS: isc-dhcp and 4 more

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2392 WID-SEC-W-2025-2392 — Internet Systems Consortium BIND: Mehrere Schwachstellen 2026-10-03T03:17:18.130210+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um Dateien zu manipulieren und um einen Denial-of-Service-Zustand zu verursachen.