CVE-2018-5734 A malformed request can trigger an assertion failure in badcache.c
HighCVSS 7.5
EPSS 6.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| isc bind | = 9.10.5-s1 | No fix listed |
| isc bind | = 9.10.5-s4 | No fix listed |
| isc bind | = 9.10.6-s1 | No fix listed |
| isc bind | = 9.10.6-s2 | No fix listed |
| netapp data ontap edge | All versions | No fix listed |
| netapp solidfire element os management node | All versions | No fix listed |
| isc BIND 9 | = 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2 | No fix listed |
References
- 103189 third-party-advisory vdb-entry
- 1040438 third-party-advisory vdb-entry
- kb.isc.org vendor-advisory
- security.netapp.com third-party-advisory
- Debian Security Tracker CVE-2018-5734 vendor-advisory