CVE-2018-5743
Description
By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit the number of simultaneous connections contained an error which could be exploited to grow the number of simultaneous connections beyond this limit. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.6, 9.12.0 -> 9.12.4, 9.14.0. BIND 9 Supported Preview Edition versions 9.9.3-S1 -> 9.11.5-S3, and 9.11.5-S5. Versions 9.13.0 -> 9.13.7 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5743.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| isc bind | 9.9.0 ≤ v ≤ 9.10.8, 9.11.0 ≤ v ≤ 9.11.6, 9.12.0 ≤ v ≤ 9.12.4, 9.13.0 ≤ v ≤ 9.13.7, 9.9.3, 9.10.8, 9.11.5, 9.14.0 | — |
| f5 big-ip_local_traffic_manager | 11.5.2 ≤ v ≤ 11.6.5, 12.1.0 ≤ v ≤ 12.1.4, 13.0.0 ≤ v ≤ 13.1.1, 14.0.0 ≤ v ≤ 14.1.0, 15.0.0 | — |
| f5 big-ip_application_acceleration_manager | 11.5.2 ≤ v ≤ 11.6.5, 12.1.0 ≤ v ≤ 12.1.4, 13.0.0 ≤ v ≤ 13.1.1, 14.0.0 ≤ v ≤ 14.1.0, 15.0.0 | — |
| f5 big-ip_advanced_firewall_manager | 11.5.2 ≤ v ≤ 11.6.5, 12.1.0 ≤ v ≤ 12.1.4, 13.1.0 ≤ v ≤ 13.1.1, 14.0.0 ≤ v ≤ 14.1.0, 15.0.0 | — |
| f5 big-ip_analytics | 11.5.2 ≤ v ≤ 11.6.5, 12.1.0 ≤ v ≤ 12.1.4, 13.0.0 ≤ v ≤ 13.1.1, 14.0.0 ≤ v ≤ 14.1.0, 15.0.0 | — |
| f5 big-ip_access_policy_manager | 11.5.2 ≤ v ≤ 11.6.5, 12.1.0 ≤ v ≤ 12.1.4, 13.1.0 ≤ v ≤ 13.1.1, 14.0.0 ≤ v ≤ 14.1.0, 15.0.0 | — |
| f5 big-ip_application_security_manager | 11.5.2 ≤ v ≤ 11.6.5, 12.1.0 ≤ v ≤ 12.1.4, 13.0.0 ≤ v ≤ 13.1.1, 14.0.0 ≤ v ≤ 14.1.1, 15.0.0 | — |
| f5 big-ip_edge_gateway | 11.5.2 ≤ v ≤ 11.6.5, 12.1.0 ≤ v ≤ 12.1.4, 13.0.0 ≤ v ≤ 13.1.1, 14.0.0 ≤ v ≤ 14.1.0, 15.0.0 | — |
| f5 big-ip_fraud_protection_service | 11.5.2 ≤ v ≤ 11.6.5, 12.1.0 ≤ v ≤ 12.1.4, 13.0.0 ≤ v ≤ 13.1.1, 14.0.0 ≤ v ≤ 14.1.0, 15.0.0 | — |
| f5 big-ip_global_traffic_manager | 11.5.2 ≤ v ≤ 11.6.5, 12.1.0 ≤ v ≤ 12.1.4, 13.0.0 ≤ v ≤ 13.1.1, 14.0.0 ≤ v ≤ 14.1.0, 15.0.0 | — |
| f5 big-ip_link_controller | 11.5.2 ≤ v ≤ 11.6.5, 12.1.0 ≤ v ≤ 12.1.4, 13.0.0 ≤ v ≤ 13.1.1, 14.0.0 ≤ v ≤ 14.1.0, 15.0.0 | — |
| f5 big-ip_webaccelerator | 11.5.2 ≤ v ≤ 11.6.5, 12.1.0 ≤ v ≤ 12.1.4, 13.1.0 ≤ v ≤ 13.1.1, 14.0.0 ≤ v ≤ 14.1.0, 15.0.0 | — |
| f5 big-ip_policy_enforcement_manager | 11.5.2 ≤ v ≤ 11.6.5, 12.1.0 ≤ v ≤ 12.1.4, 13.1.0 ≤ v ≤ 13.1.1, 14.0.0 ≤ v ≤ 14.1.0, 15.0.0 | — |
| f5 enterprise_manager | 3.1.1 | — |
| f5 big-iq_centralized_management | 5.0.0 ≤ v ≤ 5.4.0, 6.0.0 ≤ v ≤ 6.1.0 | — |
| f5 iworkflow | 2.3.0 | — |
| f5 big-ip_domain_name_system | 11.5.2 ≤ v ≤ 11.6.5, 12.1.0 ≤ v ≤ 12.1.4, 13.1.0 ≤ v ≤ 13.1.1, 14.0.0 ≤ v ≤ 14.1.0, 15.0.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.