Skip to content
OpenAdvisories
High USN-3956-2 1 CVE

bind9 vulnerability

Published May 9, 2019 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

USN-3956-1 fixed a vulnerability in Bind. This update provides
the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.

Original advisory details:

It was discovered that Bind incorrectly handled limiting the number of
simultaneous TCP clients. A remote attacker could possibly use this issue
to cause Bind to consume resources, leading to a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS bind9 1:9.9.5.dfsg-3ubuntu0.19+esm1

Vulnerabilities 1

  • High 7.5
    CVE-2018-5743

    Limiting simultaneous TCP clients was ineffective

    By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which …

    ISC BIND 9 bind9 bind9 Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2018-5743