CVE-2018-5737

BIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.

Description

A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause undesirable behavior from named, such as a recursion loop or excessive logging. Deliberate exploitation of this condition could cause operational problems depending on the particular manifestation -- either degradation or denial of service. Affects BIND 9.12.0 and 9.12.1.

Scores

Weaknesses (CWE)

• CWE-617

European references

• ENISA EUVD · EUVD-2018-17506
• GCVE · GCVE-0-2018-5737

CERT-FR advisories

• CERTFR-2018-AVI-244 — Multiples vulnérabilités dans BIND · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

• cpe:2.3:a:isc:bind:9.12.0:*:*:*:*:*:*:*
• cpe:2.3:a:isc:bind:9.12.1:*:*:*:*:*:*:*
• cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
• cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*

Affected products

References

• http://www.securityfocus.com/bid/104236
• https://kb.isc.org/docs/aa-01606
• http://www.securitytracker.com/id/1040942
• https://security.netapp.com/advisory/ntap-20180926-0004/

Sources