Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2025-40775
CVE-2025-40775:
Linux Debian vulnerability analysis and mitigation
Overview
CVE-2025-40775 is a high-severity vulnerability affecting BIND 9, discovered and disclosed by Internet Systems Consortium (ISC) on May 21, 2025. The vulnerability affects BIND 9 versions 9.20.0 through 9.20.8 and 9.21.0 through 9.21.7. When an incoming DNS protocol message includes a Transaction Signature (TSIG) with an invalid value in the algorithm field, BIND immediately aborts with an assertion failure (ISC KB, NVD).
Technical details
The vulnerability is classified with a CVSS v3.1 Base Score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The issue is related to improper handling of undefined values (CWE-232) and affects both authoritative servers and resolvers. The vulnerability is triggered when processing DNS protocol messages containing Transaction Signatures (TSIG) with invalid algorithm field values (ISC KB).
Impact
The primary impact of this vulnerability is a denial-of-service condition. An attacker can cause the named service to terminate unexpectedly by sending specific messages to the server. This affects both authoritative servers and resolvers running vulnerable versions of BIND 9 (ISC KB).
Mitigation and workarounds
No workarounds are known for this vulnerability. ISC recommends upgrading to the patched releases: BIND 9.20.9 or 9.21.8. Patches are available in the patches subdirectory of each published release directory for operators and package maintainers who prefer to apply patches selectively (Openwall, ISC KB).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management