isc bind CVE-2018-5734 in ISC and NetApp Products
Published on January 16, 2019

A malformed request can trigger an assertion failure in badcache.c

product logo product logo
While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2.

NVD


Products Associated with CVE-2018-5734

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-5734 are published in these products:

ISC BIND
 
NetApp Data Ontap Edge
 
NetApp Solidfire Element Os Management Node
 

Affected Versions

ISC BIND 9 Version 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2 is affected by CVE-2018-5734

Exploit Probability

EPSS
6.40%
Percentile
90.85%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.