Assertion failure in ISC BIND - CVE-2018-5740

Vulnerability identifier: #VU14291

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-5740

CWE-ID: CWE-617

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows an attacker to perform denial of service (DoS) attack.

The vulnerability exists due to INSIST assertion failure in name.c when processing recursive queries. A remote attacker can trigger denial of service conditions if the affected server is configured with enabled "deny-answer-aliases" feature.

ISC BIND
Amazon Linux AMI
Gentoo Linux
Red Hat Enterprise Linux for Power
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for ARM
Anolis OS
Red Hat Enterprise Linux EUS Compute Node
Slackware Linux
Opensuse
Fedora
bind (Alpine package)
bind
bind-pkcs11-devel
bind-license
bind-utils
bind-sdb-chroot
bind-sdb
bind-pkcs11-utils
bind-pkcs11-libs
bind-chroot
bind-pkcs11
bind-lite-devel
bind-libs-lite
bind-libs
bind-export-libs
bind-export-devel
bind-devel

Update to version 9.9.13-P1, 9.10.8-P1, 9.11.3-S3, 9.11.4-P1 or 9.12.2-P1

ISC BIND - addressed in versions 9.9.13-P1, 9.10.8-P1, 9.11.3-S3, 9.11.4-P1, 9.12.2-P1
bind (Alpine package) - update to 9.10.8_p1-r0
bind - addressed in versions 9.11.4-2.P1.fc27, 9.11.4-5.P1.fc28
bind-pkcs11-devel - update to 9.11.4-26.P2
bind - update to 9.11.4-26.P2
bind-license - update to 9.11.4-26.P2
bind-utils - update to 9.11.4-26.P2
bind-sdb-chroot - update to 9.11.4-26.P2
bind-sdb - update to 9.11.4-26.P2
bind-pkcs11-utils - update to 9.11.4-26.P2
bind-pkcs11-libs - update to 9.11.4-26.P2
bind-chroot - update to 9.11.4-26.P2
bind-pkcs11 - update to 9.11.4-26.P2
bind-lite-devel - update to 9.11.4-26.P2
bind-libs-lite - update to 9.11.4-26.P2
bind-libs - update to 9.11.4-26.P2
bind-export-libs - update to 9.11.4-26.P2
bind-export-devel - update to 9.11.4-26.P2
bind-devel - update to 9.11.4-26.P2

• https://kb.isc.org/article/AA-01639/74/CVE-2018-5740%3A-A-flaw-in-the-deny-answer-aliases-feature-ca...

• Denial of service in ISC BIND
• Slackware Linux update for bind
• Red Hat update for ISC BIND
• Red Hat update for ISC BIND
• Amazon Linux AMI update for bind
• Gentoo update for BIND
• OpenSUSE Linux update for bind
• OpenSUSE Linux update for bind
• Assertion failure in bind (Alpine package)
• Anolis OS update for bind
• Fedora 28 update for bind
• Fedora 27 update for bind