CNNVD-202507-2133 Information

CNNVD ID

CNNVD-202507-2133

CVE-2025-40777

  • CNNVD Published: 2025-07-16

Description (Chinese)

ISC BIND 9是ISC组织的一个域名系统软件。 ISC BIND 9存在安全漏洞,该漏洞源于断言失败,可能导致服务中止。以下版本受到影响:9.20.0至9.20.10版本、9.21.0至9.21.9版本和9.20.9-S1至9.20.10-S1版本。

Description (English)

ISC BIND 9 is an ISC-organized domain name system software. ISC BIND 9 has a security loophole, which stems from the failure of the assertion and could lead to the suspension of services. The following versions were affected: 9.2.0-9.20.10, 9.21.0-9.21.9 and 9.20.9-S1-9.20.10-S1.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

ISE

Published

2025-07-16

Last Modified

2026-02-24

References

https://kb.isc.org/docs/cve-2025-40777 https://vigilance.fr/vulnerability/ISC-BIND-assertion-error-via-stale-answer-client-timeout-47734 https://access.redhat.com/security/cve/cve-2025-40777

Patch

https://www.isc.org/download/

Share on: