NetSight
IP …
high7.5

CVE-2018-5740

"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method …

Impact

"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes it easy, when the feature is in use, to experience an assertion failure in name.c. Affects BIND 9.7.0->9.8.8, 9.9.0->9.9.13, 9.10.0->9.10.8, 9.11.0->9.11.4, 9.12.0->9.12.2, 9.13.0->9.13.2.

Affected products

VendorProductAffected versions
IscBind
from 9.7.0 before 9.8.8
from 9.9.0 before 9.9.13
from 9.10.0 before 9.10.8
from 9.11.0 before 9.11.4
from 9.12.0 before 9.12.2
from 9.13.0 before 9.13.2
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Version 7.6
RedhatEnterprise Linux Server Eus
Versions 7.5, 7.6
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
DebianDebian Linux
Versions 8.0, 9.0
NetappData Ontap Edge
All versions
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04
HpHp-Ux
All versions
OpensuseLeap
Versions 15.0, 15.1, 42.3

Weakness classification

CWE-617

References