Main
Vulnerability Database
Exploits
ID:12064 - Exploit for Insufficient verification of data authenticity in ISC BIND - CVE-2025-40778
ID:12064 - Exploit for Insufficient verification of data authenticity in ISC BIND - CVE-2025-40778
Published: October 31, 2025
Vulnerability identifier: #VU117610
Vulnerability risk: Medium
CVE-ID: CVE-2025-40778
CWE-ID: CWE-345
Exploitation vector: Remote access
Vulnerable software:
ISC BIND
ISC BIND
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to poison DNS cache.
The vulnerability exists due to insufficient verification of data authenticity when accepting records from answers. A remote attacker can inject forged data into the cache leading to DNS cache poisoning.
Remediation
Install updates from vendor's website.