Skip to content
OpenAdvisories
High USN-3956-1 1 CVE

bind9 vulnerability

Published Apr 25, 2019 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Bind incorrectly handled limiting the number of
simultaneous TCP clients. A remote attacker could possibly use this issue
to cause Bind to consume resources, leading to a denial of service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS bind9 1:9.10.3.dfsg.P4-8ubuntu1.14
Ubuntu · 18.04 LTS 18.04:LTS bind9 1:9.11.3+dfsg-1ubuntu1.7

Vulnerabilities 1

  • High 7.5
    CVE-2018-5743

    Limiting simultaneous TCP clients was ineffective

    By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which …

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2018-5743