Skip to content

CVE-2025-8677

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
November 16, 2025
Last Seen
November 16, 2025
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Fedora 43 and 42 Address Critical DNSSEC Vulnerability in BIND18.3

Fedora has released security updates for BIND, addressing a critical DNSSEC validation issue. The vulnerability, identified as CVE-2025-8677, allows DNSSEC validation to fail if a matching but invalid DNSKEY is found, potentially leading to spoofing attacks. The updates apply to BIND version 9.21.14...

Fedora 43 and 42 Address Critical DNSSEC Vulnerability in BIND5.8

Fedora has released security updates for BIND (Berkeley Internet Name Domain) version 9.21.14 to address a critical vulnerability (CVE-2025-8677) affecting DNSSEC validation. This vulnerability allows DNSSEC validation to fail if a matching but invalid DNSKEY is found, potentially leading to various...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

DNS Cache Poisoning