CVE-2025-40780

Cache poisoning due to weak PRNG

CVE-2025-40780 is fixed in 38 products on 1 platform, first by bind9 1:9.18.30-0ubuntu0.20.04.2+esm1, released October 21, 2025. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.6
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0047
40th percentile

In specific circumstances, due to a weakness in the Pseudo Random NumberGenerator (PRNG) that is used, it is possible for an attacker to predictthe source port and query ID that BIND will use.This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through9.20.13-S1.

Where it's fixed

ProductFixed inFixReleased
Linux
bind · RHEL 10 9.18.33-10.el10_1.2 RHSA-2025:21034 Oct 22, 2025
bind · RHEL 9 32:9.16.23-34.el9_7.1 RHSA-2025:21110 Nov 12, 2025
bind · almalinux 10 32:9.18.33-10.el10_1.2 ALSA-2025:21034 Nov 11, 2025
bind · almalinux 9 32:9.16.23-34.el9_7.1 ALSA-2025:21110 Nov 12, 2025
bind · amzn 2023 32:9.18.33-1.amzn2023.0.4 ALAS2023-2025-1255 Nov 5, 2025
bind · ol 10 32:9.18.33-4.0.1.el10_0.2 ELSA-2025-19912 Nov 6, 2025
bind · ol 9 32:9.16.23-31.0.1.el9_6.2 ELSA-2025-19951 Nov 10, 2025
bind · opensuse-leap 15.6 9.18.33-150600.3.18.1 SUSE-SU-2025:4110-1 Nov 14, 2025
bind · opensuse-leap 16.0 9.20.15-160000.1.1 OPENSUSE-SU-2026:20039-1 Jan 15, 2026
bind · rocky 10 2:9.18.33-10.el10_1.2 RLSA-2025:21034 Nov 21, 2025
bind · rocky 9 2:9.16.23-34.el9_7.1 RLSA-2025:21110 Nov 21, 2025
bind · sles 15.6 9.18.33-150600.3.18.1 SUSE-SU-2025:4110-1 Nov 14, 2025
bind · sles 15.7 9.16.6-150300.22.53.1 SUSE-SU-2025:4109-1 Nov 14, 2025
bind · sles 16.0 9.20.15-160000.1.1 SUSE-SU-2026:20085-1 Jan 15, 2026
bind-chroot · RHEL 9 32:9.16.23-34.el9_7.1 RHSA-2025:21110 Nov 12, 2025
bind-chroot · almalinux 10 32:9.18.33-10.el10_1.2 ALSA-2025:21034 Nov 11, 2025
bind-chroot · almalinux 9 32:9.16.23-34.el9_7.1 ALSA-2025:21110 Nov 12, 2025
bind-chroot · amzn 2023 32:9.18.33-1.amzn2023.0.4 ALAS2023-2025-1255 Nov 5, 2025
bind-chroot · ol 10 32:9.18.33-4.0.1.el10_0.2 ELSA-2025-19912 Nov 6, 2025
bind-chroot · ol 9 32:9.16.23-31.0.1.el9_6.2 ELSA-2025-19951 Nov 10, 2025
bind-debuginfo · amzn 2023 32:9.18.33-1.amzn2023.0.4 ALAS2023-2025-1255 Nov 5, 2025
bind-debugsource · amzn 2023 32:9.18.33-1.amzn2023.0.4 ALAS2023-2025-1255 Nov 5, 2025
bind-devel · RHEL 9 32:9.16.23-34.el9_7.1 RHSA-2025:21110 Nov 12, 2025
bind-devel · almalinux 10 32:9.18.33-10.el10_1.2 ALSA-2025:21034 Nov 11, 2025
bind-devel · almalinux 9 32:9.16.23-34.el9_7.1 ALSA-2025:21110 Nov 12, 2025
bind-devel · amzn 2023 32:9.18.33-1.amzn2023.0.4 ALAS2023-2025-1255 Nov 5, 2025
bind-devel · ol 10 32:9.18.33-4.0.1.el10_0.2 ELSA-2025-19912 Nov 6, 2025
bind-devel · ol 9 32:9.16.23-31.0.1.el9_6.2 ELSA-2025-19951 Nov 10, 2025
bind-dnssec-doc · RHEL 9 32:9.16.23-34.el9_7.1 RHSA-2025:21110 Nov 12, 2025
bind-dnssec-doc · almalinux 9 32:9.16.23-34.el9_7.1 ALSA-2025:21110 Nov 12, 2025
bind-dnssec-doc · ol 9 32:9.16.23-31.0.1.el9_6.2 ELSA-2025-19951 Nov 10, 2025
bind-dnssec-utils · RHEL 9 32:9.16.23-34.el9_7.1 RHSA-2025:21110 Nov 12, 2025
bind-dnssec-utils · almalinux 10 32:9.18.33-10.el10_1.2 ALSA-2025:21034 Nov 11, 2025
bind-dnssec-utils · almalinux 9 32:9.16.23-34.el9_7.1 ALSA-2025:21110 Nov 12, 2025
bind-dnssec-utils · amzn 2023 32:9.18.33-1.amzn2023.0.4 ALAS2023-2025-1255 Nov 5, 2025
bind-dnssec-utils · ol 10 32:9.18.33-4.0.1.el10_0.2 ELSA-2025-19912 Nov 6, 2025
bind-dnssec-utils · ol 9 32:9.16.23-31.0.1.el9_6.2 ELSA-2025-19951 Nov 10, 2025
bind-dnssec-utils-debuginfo · amzn 2023 32:9.18.33-1.amzn2023.0.4 ALAS2023-2025-1255 Nov 5, 2025
bind-doc · RHEL 9 32:9.16.23-34.el9_7.1 RHSA-2025:21110 Nov 12, 2025
bind-doc · almalinux 10 32:9.18.33-10.el10_1.2 ALSA-2025:21034 Nov 11, 2025
bind-doc · almalinux 9 32:9.16.23-34.el9_7.1 ALSA-2025:21110 Nov 12, 2025
bind-doc · amzn 2023 32:9.18.33-1.amzn2023.0.4 ALAS2023-2025-1255 Nov 5, 2025
bind-doc · ol 10 32:9.18.33-4.0.1.el10_0.2 ELSA-2025-19912 Nov 6, 2025
bind-doc · ol 9 32:9.16.23-31.0.1.el9_6.2 ELSA-2025-19951 Nov 10, 2025
bind-libs · RHEL 9 32:9.16.23-34.el9_7.1 RHSA-2025:21110 Nov 12, 2025
bind-libs · almalinux 10 32:9.18.33-10.el10_1.2 ALSA-2025:21034 Nov 11, 2025
bind-libs · almalinux 9 32:9.16.23-34.el9_7.1 ALSA-2025:21110 Nov 12, 2025
bind-libs · amzn 2023 32:9.18.33-1.amzn2023.0.4 ALAS2023-2025-1255 Nov 5, 2025
bind-libs · ol 10 32:9.18.33-4.0.1.el10_0.2 ELSA-2025-19912 Nov 6, 2025
bind-libs · ol 9 32:9.16.23-31.0.1.el9_6.2 ELSA-2025-19951 Nov 10, 2025
bind-libs-debuginfo · amzn 2023 32:9.18.33-1.amzn2023.0.4 ALAS2023-2025-1255 Nov 5, 2025
bind-license · RHEL 9 32:9.16.23-34.el9_7.1 RHSA-2025:21110 Nov 12, 2025
bind-license · almalinux 10 32:9.18.33-10.el10_1.2 ALSA-2025:21034 Nov 11, 2025
bind-license · almalinux 9 32:9.16.23-34.el9_7.1 ALSA-2025:21110 Nov 12, 2025
bind-license · amzn 2023 32:9.18.33-1.amzn2023.0.4 ALAS2023-2025-1255 Nov 5, 2025
bind-license · ol 10 32:9.18.33-4.0.1.el10_0.2 ELSA-2025-19912 Nov 6, 2025
bind-license · ol 9 32:9.16.23-31.0.1.el9_6.2 ELSA-2025-19951 Nov 10, 2025
bind-utils · RHEL 9 32:9.16.23-34.el9_7.1 RHSA-2025:21110 Nov 12, 2025
bind-utils · almalinux 10 32:9.18.33-10.el10_1.2 ALSA-2025:21034 Nov 11, 2025
bind-utils · almalinux 9 32:9.16.23-34.el9_7.1 ALSA-2025:21110 Nov 12, 2025
bind-utils · amzn 2023 32:9.18.33-1.amzn2023.0.4 ALAS2023-2025-1255 Nov 5, 2025
bind-utils · ol 10 32:9.18.33-4.0.1.el10_0.2 ELSA-2025-19912 Nov 6, 2025
bind-utils · ol 9 32:9.16.23-31.0.1.el9_6.2 ELSA-2025-19951 Nov 10, 2025
bind-utils-debuginfo · amzn 2023 32:9.18.33-1.amzn2023.0.4 ALAS2023-2025-1255 Nov 5, 2025
bind9 · Debian 12.15 (bookworm) 1:9.18.41-1~deb12u1 DEBIAN-CVE-2025-40780 Oct 22, 2025
bind9 · Debian 13.5 (trixie) 1:9.20.15-1~deb13u1 DEBIAN-CVE-2025-40780 Oct 22, 2025
bind9 · Debian 14 1:9.20.15-1 DEBIAN-CVE-2025-40780 Oct 22, 2025
bind9 · Ubuntu 20.04 LTS (focal) 1:9.18.30-0ubuntu0.20.04.2+esm1 bind9 1:9.18.30-0ubuntu0.20.04.2+esm1 Oct 21, 2025
bind9 · Ubuntu 22.04.1 LTS (jammy) 1:9.18.39-0ubuntu0.22.04.2 bind9 1:9.18.39-0ubuntu0.22.04.2 Oct 21, 2025
bind9 · Ubuntu 24.04.5 LTS (noble) 1:9.18.39-0ubuntu0.24.04.2 bind9 1:9.18.39-0ubuntu0.24.04.2 Oct 21, 2025
bind9 · Ubuntu 25.04 (plucky) 1:9.20.11-0ubuntu0.2 bind9 1:9.20.11-0ubuntu0.2 Oct 22, 2025
bind9 · Ubuntu 25.10 (questing) 1:9.20.11-1ubuntu2.1 bind9 1:9.20.11-1ubuntu2.1 Oct 21, 2025
bind9 · Ubuntu 26.04.1 LTS (resolute) 1:9.20.11-1ubuntu3 bind9 1:9.20.11-1ubuntu3 Oct 21, 2025
bind9-dnsutils · Ubuntu 20.04 LTS (focal) 1:9.18.30-0ubuntu0.20.04.2+esm1 bind9-dnsutils 1:9.18.30-0ubuntu0.20.04.2+esm1 Oct 21, 2025
bind9-dnsutils · Ubuntu 22.04.1 LTS (jammy) 1:9.18.39-0ubuntu0.22.04.2 bind9-dnsutils 1:9.18.39-0ubuntu0.22.04.2 Oct 21, 2025
bind9-dnsutils · Ubuntu 24.04.5 LTS (noble) 1:9.18.39-0ubuntu0.24.04.2 bind9-dnsutils 1:9.18.39-0ubuntu0.24.04.2 Oct 21, 2025
bind9-dnsutils · Ubuntu 25.04 (plucky) 1:9.20.11-0ubuntu0.2 bind9-dnsutils 1:9.20.11-0ubuntu0.2 Oct 22, 2025
bind9-dnsutils · Ubuntu 25.10 (questing) 1:9.20.11-1ubuntu2.1 bind9-dnsutils 1:9.20.11-1ubuntu2.1 Oct 21, 2025
bind9-dnsutils · Ubuntu 26.04.1 LTS (resolute) 1:9.20.11-1ubuntu3 bind9-dnsutils 1:9.20.11-1ubuntu3 Oct 21, 2025
bind9-host · Ubuntu 20.04 LTS (focal) 1:9.18.30-0ubuntu0.20.04.2+esm1 bind9-host 1:9.18.30-0ubuntu0.20.04.2+esm1 Oct 21, 2025
bind9-host · Ubuntu 22.04.1 LTS (jammy) 1:9.18.39-0ubuntu0.22.04.2 bind9-host 1:9.18.39-0ubuntu0.22.04.2 Oct 21, 2025
bind9-host · Ubuntu 24.04.5 LTS (noble) 1:9.18.39-0ubuntu0.24.04.2 bind9-host 1:9.18.39-0ubuntu0.24.04.2 Oct 21, 2025
bind9-host · Ubuntu 25.04 (plucky) 1:9.20.11-0ubuntu0.2 bind9-host 1:9.20.11-0ubuntu0.2 Oct 22, 2025
bind9-host · Ubuntu 25.10 (questing) 1:9.20.11-1ubuntu2.1 bind9-host 1:9.20.11-1ubuntu2.1 Oct 21, 2025
bind9-host · Ubuntu 26.04.1 LTS (resolute) 1:9.20.11-1ubuntu3 bind9-host 1:9.20.11-1ubuntu3 Oct 21, 2025
bind9-libs · Ubuntu 20.04 LTS (focal) 1:9.18.30-0ubuntu0.20.04.2+esm1 bind9-libs 1:9.18.30-0ubuntu0.20.04.2+esm1 Oct 21, 2025
bind9-libs · Ubuntu 22.04.1 LTS (jammy) 1:9.18.39-0ubuntu0.22.04.2 bind9-libs 1:9.18.39-0ubuntu0.22.04.2 Oct 21, 2025
bind9-libs · Ubuntu 24.04.5 LTS (noble) 1:9.18.39-0ubuntu0.24.04.2 bind9-libs 1:9.18.39-0ubuntu0.24.04.2 Oct 21, 2025
bind9-libs · Ubuntu 25.04 (plucky) 1:9.20.11-0ubuntu0.2 bind9-libs 1:9.20.11-0ubuntu0.2 Oct 22, 2025
bind9-libs · Ubuntu 25.10 (questing) 1:9.20.11-1ubuntu2.1 bind9-libs 1:9.20.11-1ubuntu2.1 Oct 21, 2025
bind9-libs · Ubuntu 26.04.1 LTS (resolute) 1:9.20.11-1ubuntu3 bind9-libs 1:9.20.11-1ubuntu3 Oct 21, 2025
bind9-utils · Ubuntu 20.04 LTS (focal) 1:9.18.30-0ubuntu0.20.04.2+esm1 bind9-utils 1:9.18.30-0ubuntu0.20.04.2+esm1 Oct 21, 2025
bind9-utils · Ubuntu 22.04.1 LTS (jammy) 1:9.18.39-0ubuntu0.22.04.2 bind9-utils 1:9.18.39-0ubuntu0.22.04.2 Oct 21, 2025
bind9-utils · Ubuntu 24.04.5 LTS (noble) 1:9.18.39-0ubuntu0.24.04.2 bind9-utils 1:9.18.39-0ubuntu0.24.04.2 Oct 21, 2025
bind9-utils · Ubuntu 25.04 (plucky) 1:9.20.11-0ubuntu0.2 bind9-utils 1:9.20.11-0ubuntu0.2 Oct 22, 2025
bind9-utils · Ubuntu 25.10 (questing) 1:9.20.11-1ubuntu2.1 bind9-utils 1:9.20.11-1ubuntu2.1 Oct 21, 2025
bind9-utils · Ubuntu 26.04.1 LTS (resolute) 1:9.20.11-1ubuntu3 bind9-utils 1:9.20.11-1ubuntu3 Oct 21, 2025
bind9.16 · RHEL 8 32:9.16.23-0.22.el8_10.4 RHSA-2025:19793 Nov 5, 2025
bind9.16 · almalinux 8 32:9.16.23-0.22.el8_10.4 ALSA-2025:19793 Nov 5, 2025
bind9.16 · ol 8 32:9.16.23-0.22.el8_10.4 ELSA-2025-19793 Nov 5, 2025
bind9.16 · rocky 8 2:9.16.23-0.22.el8_10.4 RLSA-2025:19793 Nov 6, 2025
bind9.16-chroot · RHEL 8 32:9.16.23-0.22.el8_10.4 RHSA-2025:19793 Nov 5, 2025
bind9.16-chroot · almalinux 8 32:9.16.23-0.22.el8_10.4 ALSA-2025:19793 Nov 5, 2025
bind9.16-chroot · ol 8 32:9.16.23-0.22.el8_10.4 ELSA-2025-19793 Nov 5, 2025
bind9.16-devel · RHEL 8 32:9.16.23-0.22.el8_10.4 RHSA-2025:19793 Nov 5, 2025
bind9.16-devel · almalinux 8 32:9.16.23-0.22.el8_10.4 ALSA-2025:19793 Nov 5, 2025
bind9.16-devel · ol 8 32:9.16.23-0.22.el8_10.4 ELSA-2025-19793 Nov 5, 2025
bind9.16-dnssec-utils · RHEL 8 32:9.16.23-0.22.el8_10.4 RHSA-2025:19793 Nov 5, 2025
bind9.16-dnssec-utils · almalinux 8 32:9.16.23-0.22.el8_10.4 ALSA-2025:19793 Nov 5, 2025
bind9.16-dnssec-utils · ol 8 32:9.16.23-0.22.el8_10.4 ELSA-2025-19793 Nov 5, 2025
bind9.16-doc · RHEL 8 32:9.16.23-0.22.el8_10.4 RHSA-2025:19793 Nov 5, 2025
bind9.16-doc · almalinux 8 32:9.16.23-0.22.el8_10.4 ALSA-2025:19793 Nov 5, 2025
bind9.16-doc · ol 8 32:9.16.23-0.22.el8_10.4 ELSA-2025-19793 Nov 5, 2025
bind9.16-libs · RHEL 8 32:9.16.23-0.22.el8_10.4 RHSA-2025:19793 Nov 5, 2025
bind9.16-libs · almalinux 8 32:9.16.23-0.22.el8_10.4 ALSA-2025:19793 Nov 5, 2025
bind9.16-libs · ol 8 32:9.16.23-0.22.el8_10.4 ELSA-2025-19793 Nov 5, 2025
bind9.16-license · RHEL 8 32:9.16.23-0.22.el8_10.4 RHSA-2025:19793 Nov 5, 2025
bind9.16-license · almalinux 8 32:9.16.23-0.22.el8_10.4 ALSA-2025:19793 Nov 5, 2025
bind9.16-license · ol 8 32:9.16.23-0.22.el8_10.4 ELSA-2025-19793 Nov 5, 2025
bind9.16-utils · RHEL 8 32:9.16.23-0.22.el8_10.4 RHSA-2025:19793 Nov 5, 2025
bind9.16-utils · almalinux 8 32:9.16.23-0.22.el8_10.4 ALSA-2025:19793 Nov 5, 2025
bind9.16-utils · ol 8 32:9.16.23-0.22.el8_10.4 ELSA-2025-19793 Nov 5, 2025
bind9.18 · RHEL 9 32:9.18.29-5.el9_7.2 RHSA-2025:21111 Nov 12, 2025
bind9.18 · almalinux 9 32:9.18.29-5.el9_7.2 ALSA-2025:21111 Nov 12, 2025
bind9.18 · ol 9 32:9.18.29-4.el9_6.2 ELSA-2025-19950 Nov 10, 2025
bind9.18 · rocky 9 2:9.18.29-5.el9_7.2 RLSA-2025:21111 Nov 21, 2025
bind9.18-chroot · RHEL 9 32:9.18.29-5.el9_7.2 RHSA-2025:21111 Nov 12, 2025
bind9.18-chroot · almalinux 9 32:9.18.29-5.el9_7.2 ALSA-2025:21111 Nov 12, 2025
bind9.18-chroot · ol 9 32:9.18.29-4.el9_6.2 ELSA-2025-19950 Nov 10, 2025
bind9.18-devel · RHEL 9 32:9.18.29-5.el9_7.2 RHSA-2025:21111 Nov 12, 2025
bind9.18-devel · almalinux 9 32:9.18.29-5.el9_7.2 ALSA-2025:21111 Nov 12, 2025
bind9.18-devel · ol 9 32:9.18.29-4.el9_6.2 ELSA-2025-19950 Nov 10, 2025
bind9.18-dnssec-utils · RHEL 9 32:9.18.29-5.el9_7.2 RHSA-2025:21111 Nov 12, 2025
bind9.18-dnssec-utils · almalinux 9 32:9.18.29-5.el9_7.2 ALSA-2025:21111 Nov 12, 2025
bind9.18-dnssec-utils · ol 9 32:9.18.29-4.el9_6.2 ELSA-2025-19950 Nov 10, 2025
bind9.18-doc · RHEL 9 32:9.18.29-5.el9_7.2 RHSA-2025:21111 Nov 12, 2025
bind9.18-doc · almalinux 9 32:9.18.29-5.el9_7.2 ALSA-2025:21111 Nov 12, 2025
bind9.18-doc · ol 9 32:9.18.29-4.el9_6.2 ELSA-2025-19950 Nov 10, 2025
bind9.18-libs · RHEL 9 32:9.18.29-5.el9_7.2 RHSA-2025:21111 Nov 12, 2025
bind9.18-libs · almalinux 9 32:9.18.29-5.el9_7.2 ALSA-2025:21111 Nov 12, 2025
bind9.18-libs · ol 9 32:9.18.29-4.el9_6.2 ELSA-2025-19950 Nov 10, 2025
bind9.18-utils · RHEL 9 32:9.18.29-5.el9_7.2 RHSA-2025:21111 Nov 12, 2025
bind9.18-utils · almalinux 9 32:9.18.29-5.el9_7.2 ALSA-2025:21111 Nov 12, 2025
bind9.18-utils · ol 9 32:9.18.29-4.el9_6.2 ELSA-2025-19950 Nov 10, 2025
bind9utils · Ubuntu 20.04 LTS (focal) 1:9.18.30-0ubuntu0.20.04.2+esm1 bind9utils 1:9.18.30-0ubuntu0.20.04.2+esm1 Oct 21, 2025
bind9utils · Ubuntu 22.04.1 LTS (jammy) 1:9.18.39-0ubuntu0.22.04.2 bind9utils 1:9.18.39-0ubuntu0.22.04.2 Oct 21, 2025
bind9utils · Ubuntu 24.04.5 LTS (noble) 1:9.18.39-0ubuntu0.24.04.2 bind9utils 1:9.18.39-0ubuntu0.24.04.2 Oct 21, 2025
bind9utils · Ubuntu 25.04 (plucky) 1:9.20.11-0ubuntu0.2 bind9utils 1:9.20.11-0ubuntu0.2 Oct 22, 2025
dnsutils · Ubuntu 20.04 LTS (focal) 1:9.18.30-0ubuntu0.20.04.2+esm1 dnsutils 1:9.18.30-0ubuntu0.20.04.2+esm1 Oct 21, 2025
dnsutils · Ubuntu 22.04.1 LTS (jammy) 1:9.18.39-0ubuntu0.22.04.2 dnsutils 1:9.18.39-0ubuntu0.22.04.2 Oct 21, 2025
dnsutils · Ubuntu 24.04.5 LTS (noble) 1:9.18.39-0ubuntu0.24.04.2 dnsutils 1:9.18.39-0ubuntu0.24.04.2 Oct 21, 2025
dnsutils · Ubuntu 25.04 (plucky) 1:9.20.11-0ubuntu0.2 dnsutils 1:9.20.11-0ubuntu0.2 Oct 22, 2025
python3-bind · RHEL 9 32:9.16.23-34.el9_7.1 RHSA-2025:21110 Nov 12, 2025
python3-bind · almalinux 9 32:9.16.23-34.el9_7.1 ALSA-2025:21110 Nov 12, 2025
python3-bind · ol 9 32:9.16.23-31.0.1.el9_6.2 ELSA-2025-19951 Nov 10, 2025
python3-bind9.16 · RHEL 8 32:9.16.23-0.22.el8_10.4 RHSA-2025:19793 Nov 5, 2025
python3-bind9.16 · almalinux 8 32:9.16.23-0.22.el8_10.4 ALSA-2025:19793 Nov 5, 2025
python3-bind9.16 · ol 8 32:9.16.23-0.22.el8_10.4 ELSA-2025-19793 Nov 5, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.