CVE-2018-5743— ISC BIND 安全漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2018-5743の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Limiting simultaneous TCP clients was ineffective
ソース: NVD (National Vulnerability Database)
脆弱性説明
By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit the number of simultaneous connections contained an error which could be exploited to grow the number of simultaneous connections beyond this limit. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.6, 9.12.0 -> 9.12.4, 9.14.0. BIND 9 Supported Preview Edition versions 9.9.3-S1 -> 9.11.5-S3, and 9.11.5-S5. Versions 9.13.0 -> 9.13.7 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5743.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
ISC BIND 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
ISC BIND是美国ISC公司的一套实现了DNS协议的开源软件。 ISC BIND中存在安全漏洞，该漏洞源于程序没有充分地限制TCP客户端同时连接的个数。攻击者可利用该漏洞耗尽文件描述符，影响网络连接和文件管理。以下版本受到影响：BIND 9.9.0版本至9.10.8-P1版本，9.11.0版本至9.11.6版本，9.12.0版本至9.12.4版本，9.14.0版本，9.13.0版本至9.13.7版本（9.13 development branch），BIND 9 Supported Preview E
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2018-5743の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2018-5743のインテリジェンス情報
お願いします ログイン より多くのインテリジェンス情報を見る
- https://www.synology.com/security/advisory/Synology_SA_19_20x_refsource_CONFIRM
- https://kb.isc.org/docs/cve-2018-5743x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2018-5743
Same Patch Batch · ISC · 2019-10-09 · 9 CVEs total
| CVE-2018-5732 | A specially constructed response from a malicious server can cause a buffer overflow in dh | |
| CVE-2018-5744 | A specially crafted packet can cause named to leak memory | |
| CVE-2018-5745 | An assertion failure can occur if a trust anchor rolls over to an unsupported key algorith | |
| CVE-2019-6465 | Zone transfer controls for writable DLZ zones were not effective | |
| CVE-2019-6467 | An error in the nxdomain redirect feature can cause BIND to exit with an INSIST assertion | |
| CVE-2019-6468 | BIND Supported Preview Edition can exit with an assertion failure if nxdomain-redirect is | |
| CVE-2019-6469 | BIND Supported Preview Edition can exit with an assertion failure if ECS is in use | |
| CVE-2019-6471 | A race condition when discarding malformed packets can cause BIND to exit with an assertio |
IV. 関連脆弱性
同じ製品: BIND 9
- CVE-2026-3591
A stack use-after-return flaw in SIG(0) handling code may en - CVE-2026-3119
Authenticated query containing a TKEY record may cause named - CVE-2026-3104
Memory leak in code preparing DNSSEC proofs of non-existence - CVE-2026-1519
Excessive NSEC3 iterations cause high CPU load during insecu - CVE-2025-13878
Malformed BRID/HHIT records can cause named to terminate une
同じベンダー: ISC
- CVE-2026-3591
A stack use-after-return flaw in SIG(0) handling code may en - CVE-2026-3119
Authenticated query containing a TKEY record may cause named - CVE-2026-3104
Memory leak in code preparing DNSSEC proofs of non-existence - CVE-2026-1519
Excessive NSEC3 iterations cause high CPU load during insecu - CVE-2026-3608
Stack overflow in Kea daemons
V. CVE-2018-5743へのコメント
まだコメントはありません