Lucene search

K
f5F5F5:K16576941
HistoryMay 18, 2018 - 12:00 a.m.

K16576941 : ISC BIND vulnerability CVE-2018-5737

2018-05-1800:00:00
my.f5.com
11

7.2 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.2%

Security Advisory Description

A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause undesirable behavior from named, such as a recursion loop or excessive logging. Deliberate exploitation of this condition could cause operational problems depending on the particular manifestation – either degradation or denial of service. Affects BIND 9.12.0 and 9.12.1. (CVE-2018-5737)

Impact

There is no impact; F5 products are not affected by this vulnerability.

7.2 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.2%