CVE-2018-5744

🗓️ 09 Oct 2019 14:17:14Reported by iscType

A failure to free memory can occur when processing specific EDNS options in BIND 9 versions 9.10.7 -> 9.10.8-P1, 9.11.3 -> 9.11.5-P1, 9.12.0 -> 9.12.3-P1, 9.10.7-S1 -> 9.11.5-S3, and 9.13.0 -> 9.13.6

Reporter	Title	Published	Views	Family All 44
ALT Linux	Security fix for the ALT Linux 8 package bind version 9.10.8.P1-alt1	26 Aug 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package bind version 9.11.5.P4-alt1	22 Feb 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package bind version 9.11.5.P4-alt1	22 Feb 201900:00	–	altlinux
IBM Security Bulletins	Security Bulletin: IBM i is affected by networking BIND vulnerabilities CVE-2018-5744 CVE-2019-6465 and CVE-2018-5745.	15 Aug 202216:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in BIND affects IBM Integrated Analytics System	10 Nov 202010:27	–	ibm
AlpineLinux	CVE-2018-5744	9 Oct 201914:17	–	alpinelinux
ArchLinux	[ASA-201902-25] bind: multiple issues	25 Feb 201900:00	–	archlinux
Tenable Nessus	ISC BIND Memory Leak DoS Vulnerability	1 Mar 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : bind (EulerOS-SA-2019-2275)	27 Nov 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.5.0 : bind (EulerOS-SA-2020-1047)	13 Jan 202000:00	–	nessus

NVD

Node

isc bindRange9.10.7–9.10.8

isc bindRange9.11.3–9.11.5

isc bindRange9.12.0–9.12.3

isc bindRange9.13.0–9.13.6

isc bindMatch9.10.7s1supported_preview

isc bindMatch9.10.8-

isc bindMatch9.10.8p1

isc bindMatch9.10.8rc1

isc bindMatch9.10.8rc2

isc bindMatch9.11.5-

isc bindMatch9.11.5p1

isc bindMatch9.11.5rc1

isc bindMatch9.11.5s3supported_preview

isc bindMatch9.12.3-

isc bindMatch9.12.3p1

isc bindMatch9.12.3rc1

[
  {
    "product": "BIND 9",
    "vendor": "ISC",
    "versions": [
      {
        "status": "affected",
        "version": "BIND 9.10.7 -> 9.10.8-P1, 9.11.3 -> 9.11.5-P1, 9.12.0 -> 9.12.3-P1, and versions 9.10.7-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected."
      }
    ]
  }
]

Source	Link
kb	www.kb.isc.org/docs/cve-2018-5744

21 Nov 2024 04:09Current

7.4High risk

Vulners AI Score7.4

CVSS 25

CVSS 3.17.5

CVSS 37.5

EPSS0.04441

CWE-772