Lucene search

K
redhatcveRedhat.comRH:CVE-2018-5740
HistoryJan 13, 2022 - 6:42 a.m.

CVE-2018-5740

2022-01-1306:42:03
redhat.com
access.redhat.com
15
cve-2018-5740
bind
denial of service

EPSS

0.953

Percentile

99.4%

A denial of service flaw was discovered in bind versions that include the “deny-answer-aliases” feature. This flaw may allow a remote attacker to trigger an INSIST assert in named leading to termination of the process and a denial of service condition.

Mitigation

Disabling the "deny-answer-aliases" configuration option should prevent exploitation.