Every CVE Search/ Get API key

CVE-2018-5742

An oversight while backporting a feature leads to an assertion failure in buffer.c:420

5.9 MediumFix available

While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an assertion failure in buffer.c:420. Affects RedHat versions bind-9.9.4-65.el7 -> bind-9.9.4-72.el7. No ISC releases are affected. Other packages from other distributions who made the same error may also be affected.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.57%Up 1.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 5.9

An oversight while backporting a feature leads to an assertion failure in buffer.c:420

While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an assertion failure in buffer.c:420. Affects RedHat versions bind-9.9.4-65.el7 -> bind-9.9.4-72.el7. No ISC releases are affected. Other packages from other distributions who made the same error may also be affected.

Record
CVE-2018-5742
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
EUVDEUVD-2018-17511 5.9

While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an assertion failure in buffer.c:420. Affects RedHat versions bind-9.9.4-65.el7 -> bind-9.9.4-72.el7. No ISC releases are affected. Other packages from other distributions who made the same error may also be affected.

Record
EUVD-2018-17511
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-r4vj-82q4-crg5 No score

While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an...

While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an assertion failure in buffer.c:420. Affects RedHat versions bind-9.9.4-65.el7 -> bind-9.9.4-72.el7. No ISC releases are affected. Other packages from other distributions who made the same error may also be affected.

Record
GHSA-r4vj-82q4-crg5
Updated
2026-11-02
NVD 7.5

While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an assertion failure in buffer.c:420. Affects RedHat versions bind-9.9.4-65.el7 -> bind-9.9.4-72.el7. No ISC releases are affected. Other packages from other distributions who made the same error may also be affected.

Record
CVE-2018-5742
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-617
Updated
2026-11-02
OSVRHSA-2019:0194 5.9

Red Hat Security Advisory: bind security update

Record
RHSA-2019:0194
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bind
Red Hat:enterprise_linux:7::client
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-debuginfo
Red Hat:enterprise_linux:7::client
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-libs
Red Hat:enterprise_linux:7::client
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-libs-lite
Red Hat:enterprise_linux:7::client
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-license
Red Hat:enterprise_linux:7::client
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-utils
Red Hat:enterprise_linux:7::client
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-chroot
Red Hat:enterprise_linux:7::client
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-devel
Red Hat:enterprise_linux:7::client
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-lite-devel
Red Hat:enterprise_linux:7::client
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-pkcs11
Red Hat:enterprise_linux:7::client
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
Show 50 moreShow less
Affected packages
PackageAffectedFixed
bind-pkcs11-devel
Red Hat:enterprise_linux:7::client
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-pkcs11-libs
Red Hat:enterprise_linux:7::client
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-pkcs11-utils
Red Hat:enterprise_linux:7::client
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-sdb
Red Hat:enterprise_linux:7::client
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-sdb-chroot
Red Hat:enterprise_linux:7::client
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind
Red Hat:enterprise_linux:7::computenode
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-libs
Red Hat:enterprise_linux:7::computenode
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-libs-lite
Red Hat:enterprise_linux:7::computenode
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-license
Red Hat:enterprise_linux:7::computenode
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-utils
Red Hat:enterprise_linux:7::computenode
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-chroot
Red Hat:enterprise_linux:7::computenode
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-devel
Red Hat:enterprise_linux:7::computenode
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-lite-devel
Red Hat:enterprise_linux:7::computenode
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-pkcs11
Red Hat:enterprise_linux:7::computenode
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-pkcs11-devel
Red Hat:enterprise_linux:7::computenode
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-pkcs11-libs
Red Hat:enterprise_linux:7::computenode
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-pkcs11-utils
Red Hat:enterprise_linux:7::computenode
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-sdb
Red Hat:enterprise_linux:7::computenode
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-sdb-chroot
Red Hat:enterprise_linux:7::computenode
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind
Red Hat:enterprise_linux:7::server
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-chroot
Red Hat:enterprise_linux:7::server
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-debuginfo
Red Hat:enterprise_linux:7::server
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-libs
Red Hat:enterprise_linux:7::server
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-libs-lite
Red Hat:enterprise_linux:7::server
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-license
Red Hat:enterprise_linux:7::server
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-pkcs11
Red Hat:enterprise_linux:7::server
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-pkcs11-libs
Red Hat:enterprise_linux:7::server
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-pkcs11-utils
Red Hat:enterprise_linux:7::server
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-utils
Red Hat:enterprise_linux:7::server
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-devel
Red Hat:enterprise_linux:7::server
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-lite-devel
Red Hat:enterprise_linux:7::server
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-pkcs11-devel
Red Hat:enterprise_linux:7::server
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-sdb
Red Hat:enterprise_linux:7::server
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-sdb-chroot
Red Hat:enterprise_linux:7::server
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind
Red Hat:enterprise_linux:7::workstation
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-chroot
Red Hat:enterprise_linux:7::workstation
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-libs
Red Hat:enterprise_linux:7::workstation
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-libs-lite
Red Hat:enterprise_linux:7::workstation
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-license
Red Hat:enterprise_linux:7::workstation
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-pkcs11
Red Hat:enterprise_linux:7::workstation
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-pkcs11-libs
Red Hat:enterprise_linux:7::workstation
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-pkcs11-utils
Red Hat:enterprise_linux:7::workstation
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-utils
Red Hat:enterprise_linux:7::workstation
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-devel
Red Hat:enterprise_linux:7::workstation
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-lite-devel
Red Hat:enterprise_linux:7::workstation
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-pkcs11-devel
Red Hat:enterprise_linux:7::workstation
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-sdb
Red Hat:enterprise_linux:7::workstation
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6
bind-sdb-chroot
Red Hat:enterprise_linux:7::workstation
 before 32:9.9.4-73.el7_6
32:9.9.4-73.el7_6

History

History
RecordedChangedSources
aliases, products, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-5742 is a medium vulnerability (CVSS 5.9) in Isc Bind, published October 30, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.57%, the 75th percentile. Fixed in bind 32:9.9.4-73.el7_6.

References

Show 4 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open