CVE-2025-40776

A flaw was found in the named caching resolver, a component of BIND 9. When this resolver is configured to send EDNS Client Subnet (ECS) options, it may be vulnerable to a cache-poisoning attack. A remote attacker could exploit this to compromise the integrity of cached DNS data. This could lead to users being redirected to malicious websites or services. EDNS Client Subnet (ECS) options are only available in the BIND Subscription Edition (-S), so only the -S edition is affected by this CVE.

Red Hat does not ship the BIND Subscription Edition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.