Assertion failure in ISC BIND - CVE-2018-5737

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists on the systems that permit recursion to clients and that have the max-stale-ttl parameter set to a non-zero value due to a flaw in the serve-stale implementation even when serve-stale is not enabled. A remote attacker can trigger an assertion failure in rbtdb.c cause performance degradation on the target system such as recursion loops or excessive logging.