CVE-2018-5734

While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:isc:bind:9.10.5:s1:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.10.5:s4:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.10.6:s1:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.10.6:s2:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:solidfire_element_os_management_node:-:*:*:*:*:*:*:*

History

21 Nov 2024, 04:09

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/103189 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/103189 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1040438 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1040438 - Third Party Advisory, VDB Entry
References () https://kb.isc.org/docs/aa-01562 - Vendor Advisory () https://kb.isc.org/docs/aa-01562 - Vendor Advisory
References () https://security.netapp.com/advisory/ntap-20180926-0005/ - Third Party Advisory () https://security.netapp.com/advisory/ntap-20180926-0005/ - Third Party Advisory

Information

Published : 2019-01-16 20:29

Updated : 2024-11-21 04:09


NVD link : CVE-2018-5734

Mitre link : CVE-2018-5734

CVE.ORG link : CVE-2018-5734


JSON object : View

Products Affected

netapp

  • data_ontap_edge
  • solidfire_element_os_management_node

isc

  • bind
CWE
CWE-617

Reachable Assertion