CVE-2018-5734 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-5734 Interim 1 15 2025-11-05T03:36:22Z current 2021-05-30T14:09:38Z 2025-11-05T03:36:22Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-5734 While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 bind bind-chrootenv bind-devel bind-devel-32bit bind-doc bind-libs bind-libs-32bit bind-utils bind-libs as a component of SUSE Linux Enterprise Desktop 12 SP3 bind-libs-32bit as a component of SUSE Linux Enterprise Desktop 12 SP3 bind-utils as a component of SUSE Linux Enterprise Desktop 12 SP3 bind as a component of SUSE Linux Enterprise Desktop 12 SP3 bind as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata bind as a component of SUSE Linux Enterprise Server 11 SP3 LTSS bind as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata bind as a component of SUSE Linux Enterprise Server 11 SP4-LTSS bind-chrootenv as a component of SUSE Linux Enterprise Server 11 SP4-LTSS bind-doc as a component of SUSE Linux Enterprise Server 11 SP4-LTSS bind-libs as a component of SUSE Linux Enterprise Server 11 SP4-LTSS bind-libs-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS bind-utils as a component of SUSE Linux Enterprise Server 11 SP4-LTSS bind as a component of SUSE Linux Enterprise Server 12 SP1-LTSS bind-chrootenv as a component of SUSE Linux Enterprise Server 12 SP1-LTSS bind-devel as a component of SUSE Linux Enterprise Server 12 SP1-LTSS bind-doc as a component of SUSE Linux Enterprise Server 12 SP1-LTSS bind-libs as a component of SUSE Linux Enterprise Server 12 SP1-LTSS bind-libs-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS bind-utils as a component of SUSE Linux Enterprise Server 12 SP1-LTSS bind as a component of SUSE Linux Enterprise Server 12 SP2 bind-chrootenv as a component of SUSE Linux Enterprise Server 12 SP2 bind-doc as a component of SUSE Linux Enterprise Server 12 SP2 bind-libs as a component of SUSE Linux Enterprise Server 12 SP2 bind-libs-32bit as a component of SUSE Linux Enterprise Server 12 SP2 bind-utils as a component of SUSE Linux Enterprise Server 12 SP2 bind as a component of SUSE Linux Enterprise Server 12 SP3 bind-chrootenv as a component of SUSE Linux Enterprise Server 12 SP3 bind-doc as a component of SUSE Linux Enterprise Server 12 SP3 bind-libs as a component of SUSE Linux Enterprise Server 12 SP3 bind-libs-32bit as a component of SUSE Linux Enterprise Server 12 SP3 bind-utils as a component of SUSE Linux Enterprise Server 12 SP3 bind as a component of SUSE Linux Enterprise Server 12-LTSS bind-chrootenv as a component of SUSE Linux Enterprise Server 12-LTSS bind-devel as a component of SUSE Linux Enterprise Server 12-LTSS bind-doc as a component of SUSE Linux Enterprise Server 12-LTSS bind-libs as a component of SUSE Linux Enterprise Server 12-LTSS bind-libs-32bit as a component of SUSE Linux Enterprise Server 12-LTSS bind-utils as a component of SUSE Linux Enterprise Server 12-LTSS bind-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 bind-devel-32bit as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 bind as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 bind-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 bind as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 bind-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 bind as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2. CVE-2018-5734 SUSE Linux Enterprise Desktop 12 SP3:bind SUSE Linux Enterprise Desktop 12 SP3:bind-libs SUSE Linux Enterprise Desktop 12 SP3:bind-libs-32bit SUSE Linux Enterprise Desktop 12 SP3:bind-utils SUSE Linux Enterprise Server 11 SP1 for Teradata:bind SUSE Linux Enterprise Server 11 SP3 LTSS:bind SUSE Linux Enterprise Server 11 SP3 for Teradata:bind SUSE Linux Enterprise Server 11 SP4-LTSS:bind SUSE Linux Enterprise Server 11 SP4-LTSS:bind-chrootenv SUSE Linux Enterprise Server 11 SP4-LTSS:bind-doc SUSE Linux Enterprise Server 11 SP4-LTSS:bind-libs SUSE Linux Enterprise Server 11 SP4-LTSS:bind-libs-32bit SUSE Linux Enterprise Server 11 SP4-LTSS:bind-utils SUSE Linux Enterprise Server 12 SP1-LTSS:bind SUSE Linux Enterprise Server 12 SP1-LTSS:bind-chrootenv SUSE Linux Enterprise Server 12 SP1-LTSS:bind-devel SUSE Linux Enterprise Server 12 SP1-LTSS:bind-doc SUSE Linux Enterprise Server 12 SP1-LTSS:bind-libs SUSE Linux Enterprise Server 12 SP1-LTSS:bind-libs-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:bind-utils SUSE Linux Enterprise Server 12 SP2:bind SUSE Linux Enterprise Server 12 SP2:bind-chrootenv SUSE Linux Enterprise Server 12 SP2:bind-doc SUSE Linux Enterprise Server 12 SP2:bind-libs SUSE Linux Enterprise Server 12 SP2:bind-libs-32bit SUSE Linux Enterprise Server 12 SP2:bind-utils SUSE Linux Enterprise Server 12 SP3:bind SUSE Linux Enterprise Server 12 SP3:bind-chrootenv SUSE Linux Enterprise Server 12 SP3:bind-doc SUSE Linux Enterprise Server 12 SP3:bind-libs SUSE Linux Enterprise Server 12 SP3:bind-libs-32bit SUSE Linux Enterprise Server 12 SP3:bind-utils SUSE Linux Enterprise Server 12-LTSS:bind SUSE Linux Enterprise Server 12-LTSS:bind-chrootenv SUSE Linux Enterprise Server 12-LTSS:bind-devel SUSE Linux Enterprise Server 12-LTSS:bind-doc SUSE Linux Enterprise Server 12-LTSS:bind-libs SUSE Linux Enterprise Server 12-LTSS:bind-libs-32bit SUSE Linux Enterprise Server 12-LTSS:bind-utils SUSE Linux Enterprise Software Development Kit 11 SP4:bind SUSE Linux Enterprise Software Development Kit 11 SP4:bind-devel SUSE Linux Enterprise Software Development Kit 11 SP4:bind-devel-32bit SUSE Linux Enterprise Software Development Kit 12 SP2:bind SUSE Linux Enterprise Software Development Kit 12 SP2:bind-devel SUSE Linux Enterprise Software Development Kit 12 SP3:bind SUSE Linux Enterprise Software Development Kit 12 SP3:bind-devel important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H