7.5high
CVE-2018-5734
A malformed request can trigger an assertion failure in badcache.c
Published 7 y ago · modified 4 mo ago · JSON
CVSS
7.5
v3.0 · CNA
CISA KEV
No
not known exploited
EPSS
6.4%
percentile 94%
Public exploits
0
none known
Summary
While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2.
Exploit prediction (EPSS)
6.41% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| CNA | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Affected products
- ISC BIND 9
Classification
- Weakness
- CWE-617 Reachable Assertion
References
- kb.isc.org /docs/aa-01562 · x_refsource_CONFIRM, x_transferred
- security.netapp.com /advisory/ntap-20180926-0005/ · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/103189 · vdb-entry, x_refsource_BID, x_transferred
- securitytracker.com /id/1040438 · vdb-entry, x_refsource_SECTRACK, x_transferred
Sources
- CVE List: CVE-2018-5734
- NVD: CVE-2018-5734
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.