CVE-2025-40780

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

CVSS v3 8.6 HIGH

8.6^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://kb.isc.org/docs/cve-2025-40780
http://www.openwall.com/lists/oss-security/2025/10/22/1

Configurations

No configuration.

History

08 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) En circunstancias específicas, debido a una debilidad en el Generador de Números Pseudoaleatorios (PRNG) que se utiliza, es posible para un atacante predecir el puerto de origen y el ID de consulta que BIND utilizará. Este problema afecta a las versiones de BIND 9 9.16.0 a 9.16.50, 9.18.0 a 9.18.39, 9.20.0 a 9.20.13, 9.21.0 a 9.21.12, 9.16.8-S1 a 9.16.50-S1, 9.18.11-S1 a 9.18.39-S1, y 9.20.9-S1 a 9.20.13-S1.

Information

Published : 2025-10-22 16:15

Updated : 2026-10-08 11:10

NVD link : CVE-2025-40780

Mitre link : CVE-2025-40780

CVE.ORG link : CVE-2025-40780

JSON object : View

Products Affected

No product.

CWE

CWE-341

Predictable from Observable State

{"id": "CVE-2025-40780", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-40780", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-22T17:27:36.366032Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-officer@isc.org", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 4.0, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-officer@isc.org", "affectedData": [{"vendor": "ISC", "product": "BIND 9", "versions": [{"status": "affected", "version": "9.16.0", "versionType": "custom", "lessThanOrEqual": "9.16.50"}, {"status": "affected", "version": "9.18.0", "versionType": "custom", "lessThanOrEqual": "9.18.39"}, {"status": "affected", "version": "9.20.0", "versionType": "custom", "lessThanOrEqual": "9.20.13"}, {"status": "affected", "version": "9.21.0", "versionType": "custom", "lessThanOrEqual": "9.21.12"}, {"status": "affected", "version": "9.16.8-S1", "versionType": "custom", "lessThanOrEqual": "9.16.50-S1"}, {"status": "affected", "version": "9.18.11-S1", "versionType": "custom", "lessThanOrEqual": "9.18.39-S1"}, {"status": "affected", "version": "9.20.9-S1", "versionType": "custom", "lessThanOrEqual": "9.20.13-S1"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-22T16:15:42.720", "references": [{"url": "https://kb.isc.org/docs/cve-2025-40780", "source": "security-officer@isc.org"}, {"url": "http://www.openwall.com/lists/oss-security/2025/10/22/1", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-officer@isc.org", "description": [{"lang": "en", "value": "CWE-341"}]}], "descriptions": [{"lang": "en", "value": "In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use.\nThis issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1."}, {"lang": "es", "value": "En circunstancias espec\u00edficas, debido a una debilidad en el Generador de N\u00fameros Pseudoaleatorios (PRNG) que se utiliza, es posible para un atacante predecir el puerto de origen y el ID de consulta que BIND utilizar\u00e1.\nEste problema afecta a las versiones de BIND 9 9.16.0 a 9.16.50, 9.18.0 a 9.18.39, 9.20.0 a 9.20.13, 9.21.0 a 9.21.12, 9.16.8-S1 a 9.16.50-S1, 9.18.11-S1 a 9.18.39-S1, y 9.20.9-S1 a 9.20.13-S1."}], "lastModified": "2026-10-08T11:10:00.250", "sourceIdentifier": "security-officer@isc.org"}