CVE-2018-5734

HIGH

BIND 9.10.5-S1-9.10.5-S4, 9.10.6-S1-9.10.6-S2 - Reachable Assertion in badcache.c

Title source: llm

Description

While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2.

References (4)

Core 4

Core References

Vendor Advisory x_refsource_confirm

https://kb.isc.org/docs/aa-01562

Third Party Advisory x_refsource_confirm

https://security.netapp.com/advisory/ntap-20180926-0005/

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/103189

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1040438

Scores

CVSS v3 7.5

EPSS 0.0524

EPSS Percentile 90.1%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-617

Status published

Products (4)

isc/bind 9.10.5 s1 (2 CPE variants)

isc/bind 9.10.6 s1 (2 CPE variants)

netapp/data_ontap_edge

netapp/solidfire_element_os_management_node

Published Jan 16, 2019

Tracked Since Feb 18, 2026