{"id":86408,"date":"2026-02-07T19:03:35","date_gmt":"2026-02-07T19:03:35","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2025-40775-bind-dns-server-vulnerability-due-to-invalid-tsig-algorithm-field","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-40775-bind-dns-server-vulnerability-due-to-invalid-tsig-algorithm-field\/","title":{"rendered":"CVE-2025-40775: BIND DNS Server Vulnerability due to Invalid TSIG algorithm Field<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

This report discusses the vulnerability CVE-2025-40775, which affects BIND DNS server versions 9.20.0 through 9.20.8 and 9.21.0 through 9.21.7. This vulnerability is significant as it potentially allows unauthorized access to systems, leading to data leakage or system compromise. Given the widespread use of BIND DNS servers, this vulnerability poses a considerable risk to secure information exchange and integrity of systems across the globe.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-40775
\nSeverity: High (7.5)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential for system compromise and data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n Share secrets securely\r\n <\/h2>\r\n\r\n

\r\n Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.\r\n <\/p>\r\n\r\n

\r\n Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.\r\n <\/p>\r\n\r\n