CVE-2025-40776 | ISC BIND 9 up to 9.16.50-S1/9.18.37-S1/9.20.9/9.20.10-S1 ECS Options acceptance of extraneous untrusted data with trusted data

July 16, 2025 Yanac

A vulnerability, which was classified as problematic, has been found in ISC BIND 9 up to 9.16.50-S1/9.18.37-S1/9.20.9/9.20.10-S1. Affected by this issue is some unknown functionality of the component ECS Options Handler. The manipulation leads to acceptance of extraneous untrusted data with trusted data.

This vulnerability is handled as CVE-2025-40776. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More