CVE-2018-5734: A malformed request can trigger an assertion failure in badcache.c

Description

While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)6.3% · higher than 94% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

B9

BIND 9 · ISC

9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2 · source: vendor

BI

Bind · Isc

9.10.5; 9.10.5; 9.10.6; 9.10.6 · source: NVD

DO

Data Ontap Edge · Netapp

All versions, or not specified · source: NVD

SE

Solidfire Element OS Management Node · Netapp

All versions, or not specified · source: NVD