CVE-2018-5742: An oversight while backporting a feature leads to an assertion failure in buffer.c:420

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-10-30 · updated 2026-06-17
Weakness: CWE-617

Description

While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an assertion failure in buffer.c:420. Affects RedHat versions bind-9.9.4-65.el7 -> bind-9.9.4-72.el7. No ISC releases are affected. Other packages from other distributions who made the same error may also be affected.

Affected products

ISC BIND: from 9.9.4-65 through 9.9.4-72

References

https://access.redhat.com/security/cve/cve-2018-5742
https://access.redhat.com/security/cve/cve-2018-5742

Get alerted when CVE-2018-5742 or the next vulnerability affects your stack