CVE-2018-5734

A malformed request can trigger an assertion failure in badcache.c

High · published January 16, 2019

CVSS v3.0
7.5
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.06287 · 93.6th percentile
Published
2019-01-16T20:00Z
EPSS history
Timeline
  • 16 JAN 20:00Z
    A malformed request can trigger an assertion failure in badcache.c
    cvelistv5