Lucene search

K
f5F5F5:K82069123
HistoryMay 18, 2018 - 12:00 a.m.

K82069123 : ISC BIND vulnerability CVE-2018-5736

2018-05-1800:00:00
my.f5.com
14

5.4 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.3%

Security Advisory Description

An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone in quick succession. This defect could be deliberately exercised by an attacker who is permitted to cause a vulnerable server to initiate zone transfers (for example: by sending valid NOTIFY messages), causing the named process to exit after failing the assertion test. Affects BIND 9.12.0 and 9.12.1. (CVE-2018-5736)

Note: F5 is working to eliminate exclusionary language in our products and documentation. For more information, refer to K34150231: Exclusionary language in F5 products and documentation.

Impact

There is no impact; F5 products are not affected by this vulnerability.