CVE-2018-5736
Fixed in a distro release EPSS 18%
An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone in quick succession. This defect could be deliberately exercised by an attacker who is permitted to cause a vulnerable server to initiate zone transfers (for example: by sending valid NOTIFY messages), causing the named process to exit after failing the assertion test. Affects BIND 9.12.0 and 9.12.1.
Products: isc bind, netapp cloud_backup, netapp data_ontap_edge
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | bind | 9.12.1_p2-r0 |
| Alpine 3.11 | bind | 9.12.1_p2-r0 |
| Alpine 3.12 | bind | 9.12.1_p2-r0 |
| Alpine 3.13 | bind | 9.12.1_p2-r0 |
| Alpine 3.14 | bind | 9.12.1_p2-r0 |
| Alpine 3.15 | bind | 9.12.1_p2-r0 |
| Alpine 3.16 | bind | 9.12.1_p2-r0 |
| Alpine 3.17 | bind | 9.12.1_p2-r0 |
| Alpine 3.18 | bind | 9.12.1_p2-r0 |
| Alpine 3.19 | bind | 9.12.1_p2-r0 |
| Alpine 3.20 | bind | 9.12.1_p2-r0 |
| Alpine 3.21 | bind | 9.12.1_p2-r0 |
| Alpine 3.22 | bind | 9.12.1_p2-r0 |
| Alpine 3.23 | bind | 9.12.1_p2-r0 |
| Alpine 3.24 | bind | 9.12.1_p2-r0 |
| Alpine 3.8 | bind | 9.12.1_p2-r0 |
| Alpine 3.9 | bind | 9.12.1_p2-r0 |
| Arch Linux | bind | 9.12.1.P2-1 |
| Chainguard | bind | 0 |
| Wolfi | bind | 0 |