Bug 1679299 (CVE-2018-5744)
| Summary: | CVE-2018-5744 bind: A specially crafted packet can cause named to leak memory | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | Pedro Sampaio <psampaio> |
| Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
| Status: | CLOSED NOTABUG | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | CC: | abhgupta, anon.amish, chorn, dbaker, jokerman, jpopelka, mruprich, msehnout, pemensik, pzhukov, security-response-team, sthangav, thozza, trankin, vonsch, yozone, zdohnal |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | bind 9.11.5-P4, bind 9.12.3-P4 | Doc Type: | If docs needed, set a value |
| Doc Text: |
A flaw was found in the way bind failed to free memory when processing certain messages. An attacker could use this flaw to cause a denial of service via memory exhaustion, by send specially crafted messages with Extension mechanisms for DNS (EDNS) options.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2019-02-27 07:24:01 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1679925, 1679926, 1680514 | ||
| Bug Blocks: | 1679305 | ||
|
Description
Pedro Sampaio
2019-02-20 20:37:45 UTC
External References: https://kb.isc.org/docs/cve-2018-5744 Created bind tracking bugs for this issue: Affects: fedora-all [bug 1679925] Created bind99 tracking bugs for this issue: Affects: fedora-all [bug 1679926] Ok, Fedora bugs are already prepared, it is public. Patches apply well to 9.11 bind in RHEL8. Where are bugs for RHEL? Upstream advisory notes the following versions as being affected by this issue: 9.10.7 -> 9.10.8-P1 9.11.3 -> 9.11.5-P1 9.12.0 -> 9.12.3-P1 9.10.7-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition 9.13.0 -> 9.13.6 of the 9.13 development branch The versions of bind as shipped in Red Hat Enterprise Linux are based on older upstream versions - 9.9.4 for Red Hat Enterprise Linux 7 and 9.8.2 for Red Hat Enterprise Linux 6. Related upstream commits (on 9.11 branch): https://gitlab.isc.org/isc-projects/bind9/commit/d5243a5231c0fe11cfb29e0cf1eb3d34d6ff15ea https://gitlab.isc.org/isc-projects/bind9/commit/2bda5ac2e1635ac10a595c4ff155516ded7abec2 https://gitlab.isc.org/isc-projects/bind9/commit/bf6b47799419dd26968c4dbfd195ad339bf4c675 The patch changes the code introduced in the following commit: https://gitlab.isc.org/isc-projects/bind9/commit/1c8aa38b53a0494fc7d4c3439594d1913987f264 This functionality was introduced in upstream versions 9.11.3 and 9.10.7: https://gitlab.isc.org/isc-projects/bind9/blob/v9_11_3/CHANGES#L332-335 https://gitlab.isc.org/isc-projects/bind9/blob/v9_10_7/CHANGES#L268-271 which matches the list of affected versions as noted in comment 5 above. This functionality does not exist in the bind packages in Red Hat Enterprise Linux 7 and earlier. Acknowledgments: Name: ISC Statement: Versions of bind package shipped with Red Hat Enterprise Linux 5, 6, and 7 did not ship the vulnerable code and therefore are not affected by this flaw. For more details please refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1679299#c7 |