CVE-2018-5745CWE-327

CVE-2018-5745

Medium · published October 9, 2019

CVSS v3.1
4.9
EPSS
2%
Percentile
82.9
In the wild
Unconfirmed
What it is

"managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses managed-keys to exit due to an assertion failure if, during key rollover, a trust anchor's keys are replaced with keys which use an unsupported algorithm. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P1, 9.12.0 -> 9.12.3-P1, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5745.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02282 · 82.9th percentile
Weakness
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2019-10-09T20:15Z
Affected products (12)
ProductVersionsFixed in
isc/bind≥ 9.9.0, ≤ 9.10.7—
isc/bind≥ 9.11.0, ≤ 9.11.4—
isc/bind≥ 9.12.0, ≤ 9.12.2—
isc/bind≥ 9.13.0, ≤ 9.13.6—
isc/bindall versions—
isc/bindall versions—
isc/bindall versions—
isc/bindall versions—
isc/bindall versions—
isc/bindall versions—
isc/bindall versions—
isc/bindall versions—
References (4)
https://access.redhat.com/errata/RHSA-2019:3552 · [email protected]https://kb.isc.org/docs/cve-2018-5745 · [email protected]https://access.redhat.com/errata/RHSA-2019:3552 · af854a3a-2127-422b-91ae-364da2661108https://kb.isc.org/docs/cve-2018-5745 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 09 OCT 14:17Z
    An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys
    cvelistv5