CVE-2025-40775

{"id": "CVE-2025-40775", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-officer@isc.org", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2025-05-21T13:16:02.623", "references": [{"url": "https://kb.isc.org/docs/cve-2025-40775", "source": "security-officer@isc.org"}, {"url": "http://www.openwall.com/lists/oss-security/2025/05/21/1", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://security.netapp.com/advisory/ntap-20250523-0001/", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "security-officer@isc.org", "description": [{"lang": "en", "value": "CWE-232"}]}], "descriptions": [{"lang": "en", "value": "When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND always checks it. If the TSIG contains an invalid value in the algorithm field, BIND immediately aborts with an assertion failure.\nThis issue affects BIND 9 versions 9.20.0 through 9.20.8 and 9.21.0 through 9.21.7."}, {"lang": "es", "value": "Cuando un mensaje entrante del protocolo DNS incluye una Firma de Transacci\u00f3n (TSIG), BIND siempre la comprueba. Si la TSIG contiene un valor no v\u00e1lido en el campo de algoritmo, BIND cancela inmediatamente la operaci\u00f3n con un error de aserci\u00f3n. Este problema afecta a las versiones de BIND 9, de la 9.20.0 a la 9.20.8 y de la 9.21.0 a la 9.21.7."}], "lastModified": "2025-05-23T14:15:28.880", "sourceIdentifier": "security-officer@isc.org"}