Wind River Support Network

HomeDefectsLIN9-7369

Acknowledged

LIN9-7369 : Security Advisory - bind - CVE-2018-5740

Created: Aug 31, 2018 Updated: Mar 25, 2019

Found In Version: 9.0.0.17

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

BIND through versions 9.8.8, 9.9.13, 9.10.8, 9.11.4, 9.12.2 and 9.13.2 have a flaw in the "deny-answer-aliases" feature that can cause an INSIST assertion failure in named. A remote attacker could exploit this to cause named to crash.

https://nvd.nist.gov/vuln/detail/CVE-2018-5740

CVEs

CVE-2018-5740