Lucene search

K
redhatcveRedhat.comRH:CVE-2018-5742
HistoryApr 04, 2020 - 5:03 a.m.

CVE-2018-5742

2020-04-0405:03:24
redhat.com
access.redhat.com
8

0.001 Low

EPSS

Percentile

46.5%

While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an assertion failure in buffer.c:420. Affects RedHat versions bind-9.9.4-65.el7 -> bind-9.9.4-72.el7. No ISC releases are affected. Other packages from other distributions who made the same error may also be affected.

Mitigation

Ensure that debug logging is disabled and set to 0. This can be verified on the Bind server by the rndc status command.