CVE-2018-5734

A malformed request can trigger an assertion failure in badcache.c

State: Published
Severity: 7.5 High
Published: Jan 16, 2019
Updated: Sep 17, 2024
Reserved: Jan 17, 2018

Description

While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2.

Scores

CVSS	Score	Vector	Source
3.0	7.5 High	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	isc

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
BIND 9ISC	9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2Affected

References

https://kb.isc.org/docs/aa-01562
https://security.netapp.com/advisory/ntap-20180926-0005/
103189vdb-entry
1040438vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.