HighFix available
bind9 — security advisory
In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.
- Products
- bind9
- Affected versions
- 1:9.18.12-1, 1:9.18.13-1, 1:9.18.16-1, 1:9.18.16-1~deb12u1, 1:9.18.16-1~deb12u1~bpo11+1, 1:9.18.19-1~deb12u1, 1:9.18.19-1~deb12u1~bpo11+1, 1:9.18.24-1, 1:9.18.24-1~bpo11+1, 1:9.18.28-1~deb12u1, 1:9.18.28-1~deb12u2, 1:9.18.33-1~deb12u2, 1:9.20.11-4, 1:9.20.15-1~deb13u1, 1:9.20.15-1~deb13u1~bpo12+1
- Fixed versions
- 1:9.18.41-1~deb12u1, 1:9.20.15-1, 1:9.20.15-1~deb13u1
- CVEs
- CVE-2025-40780
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 28 Oct 2026, 11:08 UTC · Revision 1
Source evidence
In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.
osv:DEBIAN-CVE-2025-40780
bind9
Fixed versions: 1:9.18.41-1~deb12u1
bind9
Fixed versions: 1:9.20.15-1~deb13u1
bind9
Fixed versions: 1:9.20.15-1
Complete source record
{
"id": "a27232b4823e0e3210d07494e75ae05b421b72d8137d7ee38c1499a535a1de64",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2025-40780",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2025-40780",
"summary": "In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use. This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.",
"evidence": "osv:DEBIAN-CVE-2025-40780",
"products": [
{
"name": {
"value": "bind9",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:9.18.41-1~deb12u1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": [
{
"value": "1:9.18.12-1",
"evidence": "/affected/0/versions"
},
{
"value": "1:9.18.13-1",
"evidence": "/affected/0/versions"
},
{
"value": "1:9.18.16-1",
"evidence": "/affected/0/versions"
},
{
"value": "1:9.18.16-1~deb12u1",
"evidence": "/affected/0/versions"
},
{
"value": "1:9.18.16-1~deb12u1~bpo11+1",
"evidence": "/affected/0/versions"
},
{
"value": "1:9.18.19-1~deb12u1",
"evidence": "/affected/0/versions"
},
{
"value": "1:9.18.19-1~deb12u1~bpo11+1",
"evidence": "/affected/0/versions"
},
{
"value": "1:9.18.24-1",
"evidence": "/affected/0/versions"
},
{
"value": "1:9.18.24-1~bpo11+1",
"evidence": "/affected/0/versions"
},
{
"value": "1:9.18.28-1~deb12u1",
"evidence": "/affected/0/versions"
},
{
"value": "1:9.18.28-1~deb12u2",
"evidence": "/affected/0/versions"
},
{
"value": "1:9.18.33-1~deb12u2",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "bind9",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:9.20.15-1~deb13u1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": [
{
"value": "1:9.20.11-4",
"evidence": "/affected/1/versions"
},
{
"value": "1:9.20.15-1~deb13u1~bpo12+1",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "bind9",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:9.20.15-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": [
{
"value": "1:9.20.11-4",
"evidence": "/affected/2/versions"
},
{
"value": "1:9.20.15-1~deb13u1",
"evidence": "/affected/2/versions"
},
{
"value": "1:9.20.15-1~deb13u1~bpo12+1",
"evidence": "/affected/2/versions"
}
]
}
],
"severity": "high",
"structured": {
"id": "DEBIAN-CVE-2025-40780",
"aliases": [
"DEBIAN-CVE-2025-40780"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:9.18.41-1~deb12u1"
}
]
}
],
"package": {
"name": "bind9",
"purl": "pkg:deb/debian/bind9?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"versions": [
"1:9.18.12-1",
"1:9.18.13-1",
"1:9.18.16-1",
"1:9.18.16-1~deb12u1",
"1:9.18.16-1~deb12u1~bpo11+1",
"1:9.18.19-1~deb12u1",
"1:9.18.19-1~deb12u1~bpo11+1",
"1:9.18.24-1",
"1:9.18.24-1~bpo11+1",
"1:9.18.28-1~deb12u1",
"1:9.18.28-1~deb12u2",
"1:9.18.33-1~deb12u2"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-40780.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:9.20.15-1~deb13u1"
}
]
}
],
"package": {
"name": "bind9",
"purl": "pkg:deb/debian/bind9?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"versions": [
"1:9.20.11-4",
"1:9.20.15-1~deb13u1~bpo12+1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-40780.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:9.20.15-1"
}
]
}
],
"package": {
"name": "bind9",
"purl": "pkg:deb/debian/bind9?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"versions": [
"1:9.20.11-4",
"1:9.20.15-1~deb13u1",
"1:9.20.15-1~deb13u1~bpo12+1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-40780.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-09T09:47:31.768672787Z",
"provider": "osv",
"upstream": [
"CVE-2025-40780"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2025-40780"
]
},
"related_cves": [
{
"value": "CVE-2025-40780",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 111618,
"published_at": "2025-10-22T16:15:42.72+00:00"
}