7.5
High
CVE-2018-5740 "deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS…
Description
"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BIND 9 | Versions not published |
References
- 105055 www.securityfocus.com
- [debian-lts-announce] 20180830 [SECURITY] [DLA 1485-1] bind9 security update lists.debian.org
- RHSA-2018:2570 access.redhat.com
- RHSA-2018:2571 access.redhat.com
- USN-3769-2 usn.ubuntu.com
- 1041436 www.securitytracker.com
- security.netapp.com security.netapp.com
- kb.isc.org kb.isc.org
- USN-3769-1 usn.ubuntu.com
- GLSA-201903-13 security.gentoo.org
- openSUSE-SU-2019:1533 lists.opensuse.org
- openSUSE-SU-2019:1532 lists.opensuse.org
- support.hpe.com support.hpe.com
- [debian-lts-announce] 20211102 [SECURITY] [DLA 2807-1] bind9 security update lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of BIND 9
The 87 CVEs of BIND 9 →
CVE-2026-97313
A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may…
7.5
High
CVE-2026-96888
A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an…
7.5
High
CVE-2026-94300
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`"
8.1
High
CVE-2026-19630
In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with…
7.5
High