CVE-2018-5743

Source
https://cve.org/CVERecord?id=CVE-2018-5743
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5743.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-5743
Downstream
Related
Published
2019-10-09T16:15:13.763Z
Modified
2026-03-15T14:31:52.766750Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit the number of simultaneous connections contained an error which could be exploited to grow the number of simultaneous connections beyond this limit. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.6, 9.12.0 -> 9.12.4, 9.14.0. BIND 9 Supported Preview Edition versions 9.9.3-S1 -> 9.11.5-S3, and 9.11.5-S5. Versions 9.13.0 -> 9.13.7 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5743.

References

Affected packages

Git / gitlab.isc.org/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events
Introduced
Last affected
Introduced
Last affected
Introduced
Last affected
Introduced
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Database specific
{
    "versions": [
        {
            "introduced": "9.9.0"
        },
        {
            "last_affected": "9.10.8"
        },
        {
            "introduced": "9.11.0"
        },
        {
            "last_affected": "9.11.6"
        },
        {
            "introduced": "9.12.0"
        },
        {
            "last_affected": "9.12.4"
        },
        {
            "introduced": "9.13.0"
        },
        {
            "last_affected": "9.13.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.9.3-s1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.14.0"
        }
    ]
}

Affected versions

v9.*
v9.11.0
v9.11.1
v9.11.1b1
v9.11.1rc1
v9.11.1rc2
v9.11.1rc3
v9.11.2b1
v9.11.2rc1
v9.11.3
v9.11.3b1
v9.11.3rc1
v9.11.4
v9.11.4rc2
v9.11.6
v9.11.6rc1
v9.13.0
v9.13.2
v9.13.3
v9.13.4
v9.13.5
v9.13.6
v9.13.7
v9.9.0
v9.9.1
v9.9.2b1
v9.9.2rc1
v9.9.3b1

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5743.json"
unresolved_ranges
[
    {
        "events": [
            {
                "introduced": "11.5.2"
            },
            {
                "last_affected": "11.6.5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "12.1.0"
            },
            {
                "last_affected": "12.1.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.0.0"
            },
            {
                "last_affected": "13.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "14.0.0"
            },
            {
                "last_affected": "14.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "11.5.2"
            },
            {
                "last_affected": "11.6.5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "12.1.0"
            },
            {
                "last_affected": "12.1.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.0.0"
            },
            {
                "last_affected": "13.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "14.0.0"
            },
            {
                "last_affected": "14.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "11.5.2"
            },
            {
                "last_affected": "11.6.5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "12.1.0"
            },
            {
                "last_affected": "12.1.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.1.0"
            },
            {
                "last_affected": "13.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "14.0.0"
            },
            {
                "last_affected": "14.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "11.5.2"
            },
            {
                "last_affected": "11.6.5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "12.1.0"
            },
            {
                "last_affected": "12.1.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.0.0"
            },
            {
                "last_affected": "13.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "14.0.0"
            },
            {
                "last_affected": "14.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "11.5.2"
            },
            {
                "last_affected": "11.6.5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "12.1.0"
            },
            {
                "last_affected": "12.1.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.1.0"
            },
            {
                "last_affected": "13.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "14.0.0"
            },
            {
                "last_affected": "14.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "11.5.2"
            },
            {
                "last_affected": "11.6.5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "12.1.0"
            },
            {
                "last_affected": "12.1.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.0.0"
            },
            {
                "last_affected": "13.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "14.0.0"
            },
            {
                "last_affected": "14.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "11.5.2"
            },
            {
                "last_affected": "11.6.5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "12.1.0"
            },
            {
                "last_affected": "12.1.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.0.0"
            },
            {
                "last_affected": "13.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "14.0.0"
            },
            {
                "last_affected": "14.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "11.5.2"
            },
            {
                "last_affected": "11.6.5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "12.1.0"
            },
            {
                "last_affected": "12.1.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.0.0"
            },
            {
                "last_affected": "13.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "14.0.0"
            },
            {
                "last_affected": "14.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "11.5.2"
            },
            {
                "last_affected": "11.6.5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "12.1.0"
            },
            {
                "last_affected": "12.1.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.0.0"
            },
            {
                "last_affected": "13.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "14.0.0"
            },
            {
                "last_affected": "14.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "11.5.2"
            },
            {
                "last_affected": "11.6.5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "12.1.0"
            },
            {
                "last_affected": "12.1.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.0.0"
            },
            {
                "last_affected": "13.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "14.0.0"
            },
            {
                "last_affected": "14.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "11.5.2"
            },
            {
                "last_affected": "11.6.5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "12.1.0"
            },
            {
                "last_affected": "12.1.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.1.0"
            },
            {
                "last_affected": "13.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "14.0.0"
            },
            {
                "last_affected": "14.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "11.5.2"
            },
            {
                "last_affected": "11.6.5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "12.1.0"
            },
            {
                "last_affected": "12.1.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.1.0"
            },
            {
                "last_affected": "13.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "14.0.0"
            },
            {
                "last_affected": "14.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.10.8-p1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.11.5-s3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.11.5-s5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "3.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.0.0"
            },
            {
                "last_affected": "5.4.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "6.0.0"
            },
            {
                "last_affected": "6.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "2.3.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "11.5.2"
            },
            {
                "last_affected": "11.6.5"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "12.1.0"
            },
            {
                "last_affected": "12.1.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.1.0"
            },
            {
                "last_affected": "13.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "14.0.0"
            },
            {
                "last_affected": "14.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.0.0"
            }
        ]
    }
]