4.9
Medium
CVE-2018-5745 "managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors…
Description
"managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses managed-keys to exit due to an assertion failure if, during key rollover, a trust anchor's keys are replaced with keys which use an unsupported algorithm. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P1, 9.12.0 -> 9.12.3-P1, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5745.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BIND 9 | Versions not published |
References
- kb.isc.org kb.isc.org
- RHSA-2019:3552 access.redhat.com
Timeline
- Published
- Last modified
Other CVEs of BIND 9
The 87 CVEs of BIND 9 →
CVE-2026-97313
A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may…
7.5
High
CVE-2026-96888
A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an…
7.5
High
CVE-2026-94300
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`"
8.1
High
CVE-2026-19630
In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with…
7.5
High