CVE-2018-5742

2019-10-3014:15:11

Debian Security Bug Tracker

security-tracker.debian.org

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

46.5%

JSON

While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an assertion failure in buffer.c:420. Affects RedHat versions bind-9.9.4-65.el7 -> bind-9.9.4-72.el7. No ISC releases are affected. Other packages from other distributions who made the same error may also be affected.

OSVersionArchitecturePackageVersionFilename
Debian12allbind9< 1:9.18.24-1bind9_1:9.18.24-1_all.deb
Debian11allbind9< 1:9.16.48-1bind9_1:9.16.48-1_all.deb
Debian999allbind9< 1:9.19.24-185-g392e7199df2-1bind9_1:9.19.24-185-g392e7199df2-1_all.deb
Debian13allbind9< 1:9.19.24-185-g392e7199df2-1bind9_1:9.19.24-185-g392e7199df2-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	bind9	< 1:9.18.24-1	bind9_1:9.18.24-1_all.deb
Debian	11	all	bind9	< 1:9.16.48-1	bind9_1:9.16.48-1_all.deb
Debian	999	all	bind9	< 1:9.19.24-185-g392e7199df2-1	bind9_1:9.19.24-185-g392e7199df2-1_all.deb
Debian	13	all	bind9	< 1:9.19.24-185-g392e7199df2-1	bind9_1:9.19.24-185-g392e7199df2-1_all.deb