BIND 9 Vulnerability in Pseudo Random Number Generator by ISC
CVE-2025-40780

8.6HIGH

Key Information:

Vendor: Isc
Status: Bind 9
Vendor: CVE Published:; 22 October 2025

Badges

📈 Score: 235👾 Exploit Exists📰 News Worthy

What is CVE-2025-40780?

CVE-2025-40780 is a significant vulnerability found in BIND 9, a widely utilized Domain Name System (DNS) server software developed by the Internet Systems Consortium (ISC). This vulnerability arises from a flaw in the Pseudo Random Number Generator (PRNG) utilized by BIND, which can enable an attacker to predict the source port and query ID used by the DNS server. This prediction capability can facilitate various attacks, such as DNS spoofing or cache poisoning, allowing adversaries to redirect legitimate traffic to malicious destinations or disrupt DNS services entirely. BIND is critical for the functionality and security of numerous internet services; thus, the exploitation of this vulnerability has the potential to severely impact organizational operations and information integrity.

Potential Impact of CVE-2025-40780

DNS Spoofing and Cache Poisoning: The vulnerability allows attackers to predict DNS query identifiers, which can lead to the injection of false DNS responses. This manipulation can redirect users to fraudulent sites or intercept sensitive information.
Compromise of Network Security: Exploiting this weakness can enable adversaries to undermine the trust and integrity of a network's DNS infrastructure, potentially allowing for larger cyber attacks such as man-in-the-middle attacks or the spread of malware.
Service Disruption: Should the vulnerability be exploited, attackers could disrupt DNS services, leading to downtime for critical applications and services that rely on DNS for operation, potentially resulting in financial losses and damage to reputation.