Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Bind DNS Server Can Be Crashed or Hacked
published 1 year ago
Summary
Two vulnerabilities in the Bind DNS server could allow an attacker to crash the server or hijack traffic. This could disrupt internet access for your business, so it's essential to update to the latest version of Bind to prevent these issues. Apply the patches as soon as possible to ensure the security of your DNS service.
What to do
- Update canonical bind9 to version 1:9.18.39-0ubuntu0.22.04.2.
- Update canonical bind9 to version 1:9.18.39-0ubuntu0.24.04.2.
- Update canonical bind9 to version 1:9.20.11-1ubuntu2.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | bind9 |
< 1:9.18.39-0ubuntu0.22.04.2 Fix: upgrade to 1:9.18.39-0ubuntu0.22.04.2
|
| Ubuntu:24.04:LTS | canonical | bind9 |
< 1:9.18.39-0ubuntu0.24.04.2 Fix: upgrade to 1:9.18.39-0ubuntu0.24.04.2
|
| Ubuntu:25.10 | canonical | bind9 |
< 1:9.20.11-1ubuntu2.1 Fix: upgrade to 1:9.20.11-1ubuntu2.1
|
Original advisory text
bind9 vulnerabilities
Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain
malformed DNSKEY records. A remote attacker could possibly use this issue
to cause Bind to consume resources, resulting in a denial of service.
(CVE-2025-8677)
Yuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan discovered that Bind
incorrectly accepted certain records from answers. A remote attacker could
possibly use this issue to perform a cache poisoning attack.
(CVE-2025-40778)
Amit Klein and Omer Ben Simhon discovered that Bind used a weak PRNG. A
remote attacker could possibly use this issue to perform a cache poisoning
attack. (CVE-2025-40780)
malformed DNSKEY records. A remote attacker could possibly use this issue
to cause Bind to consume resources, resulting in a denial of service.
(CVE-2025-8677)
Yuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan discovered that Bind
incorrectly accepted certain records from answers. A remote attacker could
possibly use this issue to perform a cache poisoning attack.
(CVE-2025-40778)
Amit Klein and Omer Ben Simhon discovered that Bind used a weak PRNG. A
remote attacker could possibly use this issue to perform a cache poisoning
attack. (CVE-2025-40780)
References
- https://ubuntu.com/security/notices/USN-7836-1 Vendor Advisory
Timeline
Published22 Oct 2025
Updated24 Apr 2026
First seen24 Apr 2026
Sources
USN-7836-1 · OSV
Track software like this
Free during beta