Red Hat Security AdvisoryRHSA-2025:22205
bind security update
Released 2025-11-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7 ELS) bind-32:9.11.4-26.P2.el7_9.19, bind-export-libs-32:9.11.4-26.P2.el7_9.19, bind-export-libs-32:9.11.4-26.P2.el7_9.19.ppc +9
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) bind-sdb-32:9.11.4-26.P2.el7_9.19
Fixes 1 record
Priority HIGH 76
Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00667 · Published 2025-10-22 · Fixed CWE-349