CVE-2018-5734

While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2.

Score

CVSS 3.0 7.5 High

Status

Modified - security-officer@isc.org

Published

2019-01-16

Last modified

2024-09-17

Weaknesses

CWE-617

Affected products

• Bind (Isc)
• Bind 9 (Isc)
• Data Ontap Edge (Netapp)
• Solidfire Element Os Management Node (Netapp)

References

• http://www.securityfocus.com/bid/103189
• http://www.securitytracker.com/id/1040438
• https://kb.isc.org/docs/aa-01562
• https://security.netapp.com/advisory/ntap-20180926-0005/