Skip to content
Fedora 43 and 42 Address Critical DNSSEC Vulnerability in BIND

Fedora 43 and 42 Address Critical DNSSEC Vulnerability in BIND

First seen 2 Dec 2025, 18:33 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

Fedora has released security updates for BIND (Berkeley Internet Name Domain) version 9.21.14 to address a critical vulnerability (CVE-2025-8677) affecting DNSSEC validation. This vulnerability allows DNSSEC validation to fail if a matching but invalid DNSKEY is found, potentially leading to various spoofing attacks. Users of Fedora 42 and 43 are advised to apply these updates to mitigate the risk.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 217d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track CVE-2025-40778 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed