Debian dla-4364 : bind9 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4364 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4364-1 [email protected]...

CVE-2025-40778 vulnerabilities

Vulnerabilities for packages: bind...

Linux Distros Unpatched Vulnerability : CVE-2025-40778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue...

bind-9.20.15-1.1 on GA media (moderate)

bind-9.20.15-1.1 on GA media Announcement ID: openSUSE-SU-2025:15659-1 Rating: moderate Cross-References: CVE-2025-40778 CVE-2025-40780 CVE-2025-8677 CVSS scores: CVE-2025-40778 SUSE : 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N CVE-2025-40778 SUSE : 9.2...

Debian dsa-6033 : bind9 - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6033 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6033-1 [email protected]...

BELL-CVE-2025-40778

Bulletin has no description...

ISC BIND Cache Poisoning Vulnerability (CVE-2025-40778) - Windows

ISC BIND is prone to cache poisoning attacks with unsolicited RRs. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; if...

AZL-68727 CVE-2025-40778 affecting package bind for versions less than 9.16.50-3

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through...

CVE-2025-40778

creationtimestamp| type| source ---|---|--- 2025-10-22 13:56:44+00:00| seen| https://seclists.org/oss-sec/2025/q4/68 2025-10-22 15:58:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418643498336537 2025-10-22 16:10:12+00:00| seen|...

CVE-2025-40778

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through...

Adobe Media Encoder < 15.4.2 Multiple Vulnerabilities (APSB21-99) (macOS)

The version of Adobe Media Encoder installed on the remote macOS host is prior to 15.4.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-99 advisory. - Adobe Media Encoder version 15.4.1 and earlier are affected by a memory corruption vulnerability. An...

CVE-2022-40778

CVE-2022-40778 affects OPSWAT MetaDefender ICAP Server prior to 4.13.0. The vulnerability is a stored XSS caused by the blocked page response, allowing an attacker to execute arbitrary JavaScript or HTML. Connected sources confirm the affected product/version and the XSS impact. The entry does no...

CVE-2021-40778

creationtimestamp| type| source ---|---|--- 2022-03-16 17:26:54+00:00| seen| https://t.me/cibsecurity/39065...

CVE-2021-40778

Adobe Media Encoder 15.4.1 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this...

CVE-2021-40778

Adobe Media Encoder 15.4.1 and earlier are affected by a Null pointer dereference when parsing a specially crafted file, enabling an unauthenticated attacker to trigger an application denial-of-service in the context of the current user. Exploitation requires user interaction (victim opens a mali...

CVE-2021-40778 Adobe Media Encoder Null Pointer Dereference Application denial-of-service

Adobe Media Encoder 15.4.1 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this...

Adobe Media Encoder < 15.4.2 Multiple Vulnerabilities (APSB21-99)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 15.4.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-99 advisory. - Adobe Media Encoder version 15.4.1 and earlier are affected by a memory corruption vulnerability. An...