- Description
- Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion. This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.
- Source
- security-officer@isc.org
- NVD status
- Deferred
CVSS 3.1
- Type
- Secondary
- Base score
- 7.5
- Impact score
- 3.6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity
- HIGH
- security-officer@isc.org
- CWE-405
- Hype score
- Not currently trending
Just published a security advisory on CVE-2025-8677. This isn't just another vulnerability. Read more: 👉 https://t.co/OnNW8BDYGU #Security #Fedora https://t.co/aGTCTv9YSt
@Cezar_H_Linux
16 Nov 2025
45 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Just published: A deep-dive on the critical #Fedora 42 DNS vulnerabilities. The post covers the technical details of CVE-2025-8677 (that DNSSEC validation break) and the related spoofing/poisoning flaws. 👉 https://t.co/EeTMQKx4eA #Security https://t.co/um6EsuXYh1
@Cezar_H_Linux
30 Oct 2025
35 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
DNSソフト「BIND 9」に深刻な欠陥が3件（CVE-2025-8677、CVE-2025-40778、CVE-2025-40780）見つかり、ISCが10月22日に公表した。攻撃者がキャッシュ汚染やDoSを引き起こす恐れがある。
@yousukezan
23 Oct 2025
911 Impressions
0 Retweets
3 Likes
1 Bookmark
0 Replies
0 Quotes
ISCは、BIND 9におけるDNSKEYレコード処理の不具合を利用したリソース枯渇脆弱性（CVE-2025-8677）を公開しました。特別に細工されたゾーンに対する問い合わせを処理するだけで、リゾルバがCPU過負荷に陥り、全体
@t_nihonmatsu
23 Oct 2025
530 Impressions
2 Retweets
6 Likes
2 Bookmarks
0 Replies
0 Quotes
【注意喚起】（緊急）BIND 9.xの脆弱性（過剰なCPU負荷の誘発）について（CVE-2025-8677） - バージョンアップを強く推奨 - https://t.co/4qP5Sg13is
@JPRS_official
23 Oct 2025
519 Impressions
3 Retweets
7 Likes
0 Bookmarks
0 Replies
0 Quotes
【自分用メモ】CVE-2025-8677: Resource exhaustion via malformed DNSKEY handling https://t.co/Ydnfd1akr5
@OrangeMorishita
23 Oct 2025
434 Impressions
2 Retweets
4 Likes
0 Bookmarks
0 Replies
0 Quotes
BIND 9 DNSKEY CPU Exhaustion: CVE-2025-8677 A malformed DNSKEY can trigger high CPU usage in BIND 9 servers, risking denial of service for DNS infrastructure. Patch ASAP. For more details, read ZeroPath’s blog on this vuln. #AppSec #InfoSec #DNS https://t.co/o08QpGmCVg
@ZeroPathLabs
22 Oct 2025
65 Impressions
0 Retweets
0 Likes
1 Bookmark
0 Replies
0 Quotes
oss-sec: ISC has disclosed three vulnerabilities in BIND 9 (CVE-2025-8677, CVE-2025-40778, CVE-2025-40780) https://t.co/W2va6vjq0k
@teenigma_
22 Oct 2025
36 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-8677: Resource exhaustion via malformed DNSKEY handling Versions affected: BIND •9.18.0 -> 9.18.39 •9.20.0 -> 9.20.13 •9.21.0 -> 9.21.12 https://t.co/ZEXCqXuYAj
@yo_suematsu
22 Oct 2025
118 Impressions
2 Retweets
4 Likes
0 Bookmarks
0 Replies
0 Quotes