{"id":86408,"date":"2026-02-07T19:03:35","date_gmt":"2026-02-07T19:03:35","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2025-40775-bind-dns-server-vulnerability-due-to-invalid-tsig-algorithm-field","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-40775-bind-dns-server-vulnerability-due-to-invalid-tsig-algorithm-field\/","title":{"rendered":"CVE-2025-40775: BIND DNS Server Vulnerability due to Invalid TSIG algorithm Field<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

This report discusses the vulnerability CVE-2025-40775, which affects BIND DNS server versions 9.20.0 through 9.20.8 and 9.21.0 through 9.21.7. This vulnerability is significant as it potentially allows unauthorized access to systems, leading to data leakage or system compromise. Given the widespread use of BIND DNS servers, this vulnerability poses a considerable risk to secure information exchange and integrity of systems across the globe.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-40775
\nSeverity: High (7.5)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential for system compromise and data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n