p PatchFirst

CVE-2018-5740

CVE-2018-5740 · A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named

This page contains facts from public vulnerability sources. Check the original advisory before updating.

"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2.

CVSS 7.5 · High · EPSS 59.6% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • bind 9

    Versions
    • BIND 9 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2: Affected

    No fix published

  • bind9 Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:9.11.4.P1+dfsg-1

    Update to 1:9.11.4.P1+dfsg-1

  • bind9 Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:9.11.4.P1+dfsg-1

    Update to 1:9.11.4.P1+dfsg-1

  • bind9 Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:9.11.4.P1+dfsg-1

    Update to 1:9.11.4.P1+dfsg-1

  • bind9 Ubuntu:14.04:LTS

    Versions
    • 1:9.9.3.dfsg.P2-4ubuntu1
    • 1:9.9.3.dfsg.P2-4ubuntu2
    • 1:9.9.3.dfsg.P2-4ubuntu3
    • 1:9.9.5.dfsg-2
    • 1:9.9.5.dfsg-3
    • 1:9.9.5.dfsg-3ubuntu0.1
    • 1:9.9.5.dfsg-3ubuntu0.2
    • 1:9.9.5.dfsg-3ubuntu0.3
    • 1:9.9.5.dfsg-3ubuntu0.4
    • 1:9.9.5.dfsg-3ubuntu0.5
    • 1:9.9.5.dfsg-3ubuntu0.6
    • 1:9.9.5.dfsg-3ubuntu0.7
    • 1:9.9.5.dfsg-3ubuntu0.8
    • 1:9.9.5.dfsg-3ubuntu0.9
    • 1:9.9.5.dfsg-3ubuntu0.10
    • 1:9.9.5.dfsg-3ubuntu0.11
    • 1:9.9.5.dfsg-3ubuntu0.12
    • 1:9.9.5.dfsg-3ubuntu0.13
    • 1:9.9.5.dfsg-3ubuntu0.14
    • 1:9.9.5.dfsg-3ubuntu0.15
    • 1:9.9.5.dfsg-3ubuntu0.16
    • 1:9.9.5.dfsg-3ubuntu0.17
    Affected ranges
    • ECOSYSTEM: < 1:9.9.5.dfsg-3ubuntu0.18

    Update to 1:9.9.5.dfsg-3ubuntu0.18

  • bind9 Ubuntu:16.04:LTS

    Versions
    • 1:9.9.5.dfsg-11ubuntu1
    • 1:9.9.5.dfsg-12
    • 1:9.9.5.dfsg-12.1
    • 1:9.9.5.dfsg-12.1ubuntu1
    • 1:9.10.3.dfsg.P2-4
    • 1:9.10.3.dfsg.P2-5
    • 1:9.10.3.dfsg.P4-3
    • 1:9.10.3.dfsg.P4-4
    • 1:9.10.3.dfsg.P4-5
    • 1:9.10.3.dfsg.P4-8
    • 1:9.10.3.dfsg.P4-8ubuntu1
    • 1:9.10.3.dfsg.P4-8ubuntu1.1
    • 1:9.10.3.dfsg.P4-8ubuntu1.2
    • 1:9.10.3.dfsg.P4-8ubuntu1.3
    • 1:9.10.3.dfsg.P4-8ubuntu1.4
    • 1:9.10.3.dfsg.P4-8ubuntu1.5
    • 1:9.10.3.dfsg.P4-8ubuntu1.6
    • 1:9.10.3.dfsg.P4-8ubuntu1.7
    • 1:9.10.3.dfsg.P4-8ubuntu1.8
    • 1:9.10.3.dfsg.P4-8ubuntu1.9
    • 1:9.10.3.dfsg.P4-8ubuntu1.10
    Affected ranges
    • ECOSYSTEM: < 1:9.10.3.dfsg.P4-8ubuntu1.11

    Update to 1:9.10.3.dfsg.P4-8ubuntu1.11

  • bind9 Ubuntu:18.04:LTS

    Versions
    • 1:9.10.3.dfsg.P4-12.6ubuntu1
    • 1:9.11.2.P1-1ubuntu2
    • 1:9.11.2.P1-1ubuntu3
    • 1:9.11.2.P1-1ubuntu4
    • 1:9.11.2.P1-1ubuntu5
    • 1:9.11.3+dfsg-1ubuntu1
    • 1:9.11.3+dfsg-1ubuntu1.1
    Affected ranges
    • ECOSYSTEM: < 1:9.11.3+dfsg-1ubuntu1.2

    Update to 1:9.11.3+dfsg-1ubuntu1.2

Original sources

Check your server →