PT-2018-17120 · Isc+1 · Bind 9.12+1

Publicado

2018-05-18

·

Atualizado

2024-06-15

·

CVE-2018-5737

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: BIND 9.12 versions 9.12.0 through 9.12.1
Description: The issue is related to the implementation of the serve-stale feature in BIND 9, which can cause an assertion failure. Interaction with NSEC aggressive negative caching can lead to undesirable behavior, such as recursion loops or excessive logging. This could result in operational problems, including degradation or denial of service.
Recommendations: For BIND 9.12 versions 9.12.0 through 9.12.1, consider disabling the serve-stale feature as a temporary workaround to minimize the risk of exploitation. Restrict access to the rbtdb.c module to prevent potential assertion failures. Avoid using NSEC aggressive negative caching in conjunction with the serve-stale feature until the issue is resolved.

Correção

DoS

Assertion Failure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-617

Identificadores relacionados

CVE-2018-5737
OPENSUSE-SU-2024:10650-1

Produtos afetados

Bind 9.12
Bind Server