CVE-2018-5734

7.5 highEPSS 6.4%

High (7.5). EPSS 6.4% chance of exploitation in the next 30 days.

While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 6.4% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-617
Published: 2019-01-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

isc:bind
netapp:data_ontap_edge
netapp:solidfire_element_os_management_node

References

http://www.securityfocus.com/bid/103189
http://www.securitytracker.com/id/1040438
https://kb.isc.org/docs/aa-01562
https://security.netapp.com/advisory/ntap-20180926-0005/
http://www.securityfocus.com/bid/103189

Check your stack JSON