Skip to content
OpenAdvisories
High USN-3769-1 1 CVE

bind9 vulnerability

Published Sep 20, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Bind incorrectly handled the deny-answer-aliases
feature. If this feature is enabled, a remote attacker could use this issue
to cause Bind to crash, resulting in a denial of service.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS bind9 1:9.9.5.dfsg-3ubuntu0.18
Ubuntu · 16.04 LTS 16.04:LTS bind9 1:9.10.3.dfsg.P4-8ubuntu1.11
Ubuntu · 18.04 LTS 18.04:LTS bind9 1:9.11.3+dfsg-1ubuntu1.2

Vulnerabilities 1

  • High 7.5
    CVE-2018-5740 Public exploit EPSS 60%

    A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named

    "deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers. However, a defect in this feature makes…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2018-5740