GCVE-110-NCSC-2025-341

Advisory PublishedCVSS 8.6/10

Vulnetix · Advisory published October 24, 2025

A vulnerability in specific versions of BIND 9's DNS resolver allows cache injection of forged DNS records, posing a risk of redirecting clients to malicious domains, classified as Important due to limited impact.

Download JSON Open in Console

Weaknesses (CWE)

CWE-349Acceptance of Extraneous Untrusted Data With Trusted DataCWE-341Predictable from Observable StateCWE-405Asymmetric Resource Consumption (Amplification)

Risk Scores

CVSS 3.1

8.6/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Affected Products

Vendor	Product	Versions	Platforms
ISC	vers:unknown/*	—	—

Aliases

CVE-2025-40778 CVE-2025-40780 CVE-2025-8677

References

advisory

Browse GCVE Records

73,161 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON