CVE-2018-5735

Backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858

High · published October 30, 2019

CVSS v3.1
7.5
EPSS
1%
Percentile
72.0
In the wild
Unconfirmed
What it is

The Debian backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858; Affects Debian versions 9.9.5.dfsg-9+deb8u15; 9.9.5.dfsg-9+deb8u18; 9.10.3.dfsg.P4-12.3+deb9u5; 9.11.5.P4+dfsg-5.1 No ISC releases are affected. Other packages from other distributions who did similar backports for the fix for 2017-3137 may also be affected.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01386 · 72.0th percentile
Published
2019-10-30T13:42Z
EPSS history
Timeline
  • 30 OCT 13:42Z
    Backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858
    cvelistv5