{"id":"CVE-2018-5744","details":"A failure to free memory can occur when processing messages having a specific combination of EDNS options. Versions affected are: BIND 9.10.7 -\u003e 9.10.8-P1, 9.11.3 -\u003e 9.11.5-P1, 9.12.0 -\u003e 9.12.3-P1, and versions 9.10.7-S1 -\u003e 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -\u003e 9.13.6 of the 9.13 development branch are also affected.","modified":"2026-08-07T11:48:26.259361698Z","published":"2019-10-09T16:15:13.907Z","related":["CGA-qrh6-fc68-p33m"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:isc:bind:9.10.8:p1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.11.5:s3:*:*:supported_preview:*:*:*"],"extracted_events":[{"introduced":"9.10.8-p1"},{"last_affected":"9.10.8-p1"},{"introduced":"9.10.8-p1"},{"last_affected":"9.10.8-p1"},{"introduced":"9.11.5-s3"},{"last_affected":"9.11.5-s3"},{"introduced":"9.11.5-s3"},{"last_affected":"9.11.5-s3"}],"source":"CPE_STRING","vendor_product":"isc:bind"}]},"references":[{"type":"ADVISORY","url":"https://kb.isc.org/docs/cve-2018-5744"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/isc-projects/bind9","events":[{"introduced":"db65d701b999d10e555c13454bceb74df4494975"},{"fixed":"12f71327ff796ed24752a4286fc0b3d9b21a4a57"},{"introduced":"a37581543167cd471036b0d43e767c9ffb825625"},{"fixed":"3b0b2047cea8d9e61d0c1eabe2d3c958997e8be4"},{"introduced":"71a40862c0be867999867cd99e21c2266a5e452b"},{"fixed":"6c8e92c06d2d5b5904c925ca48564a93f1edba44"},{"introduced":"29b3a7d84240a51099490c0f39ae537f4e0d6a7a"},{"fixed":"acfbf1ae9438873ef2fccacd5b3692f1aab99939"},{"introduced":"fe1302d54424009769409e46c0d50c0bcccd1d31"},{"last_affected":"08a6a2d8923caecdeadbdea136ceee9a88ba1eac"}],"database_specific":{"cpe":["cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.7:s1:*:*:supported_preview:*:*:*","cpe:2.3:a:isc:bind:9.10.8:-:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.8:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.8:rc2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.11.5:-:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.11.5:p1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.11.5:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.12.3:-:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.12.3:p1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.12.3:rc1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.10.7"},{"fixed":"9.10.8"},{"introduced":"9.11.3"},{"fixed":"9.11.5"},{"introduced":"9.12.0"},{"fixed":"9.12.3"},{"introduced":"9.13.0"},{"fixed":"9.13.6"},{"introduced":"9.10.7-s1"},{"last_affected":"9.10.7-s1"},{"introduced":"9.10.8-NA"},{"last_affected":"9.10.8-NA"},{"introduced":"9.10.8-rc1"},{"last_affected":"9.10.8-rc1"},{"introduced":"9.10.8-rc2"},{"last_affected":"9.10.8-rc2"},{"introduced":"9.11.5-NA"},{"last_affected":"9.11.5-NA"},{"introduced":"9.11.5-p1"},{"last_affected":"9.11.5-p1"},{"introduced":"9.11.5-rc1"},{"last_affected":"9.11.5-rc1"},{"introduced":"9.12.3-NA"},{"last_affected":"9.12.3-NA"},{"introduced":"9.12.3-p1"},{"last_affected":"9.12.3-p1"},{"introduced":"9.12.3-rc1"},{"last_affected":"9.12.3-rc1"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["9.10.7-s1","9.10.8-NA","9.10.8-rc1","9.10.8-rc2","9.11.5-NA","9.11.5-p1","9.11.5-rc1","9.12.3-NA","9.12.3-p1","9.12.3-rc1","v9.13.5","v9.13.4","v9.13.3","v9.13.2","v9.10.8rc2","v9.13.0","v9.10.7rc1","v9.10.7b1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5744.json"}},{"ranges":[{"type":"GIT","repo":"https://gitlab.isc.org/isc-projects/bind9","events":[{"introduced":"db65d701b999d10e555c13454bceb74df4494975"},{"fixed":"12f71327ff796ed24752a4286fc0b3d9b21a4a57"},{"introduced":"a37581543167cd471036b0d43e767c9ffb825625"},{"fixed":"3b0b2047cea8d9e61d0c1eabe2d3c958997e8be4"},{"introduced":"71a40862c0be867999867cd99e21c2266a5e452b"},{"fixed":"6c8e92c06d2d5b5904c925ca48564a93f1edba44"},{"introduced":"29b3a7d84240a51099490c0f39ae537f4e0d6a7a"},{"fixed":"acfbf1ae9438873ef2fccacd5b3692f1aab99939"},{"introduced":"fe1302d54424009769409e46c0d50c0bcccd1d31"},{"last_affected":"08a6a2d8923caecdeadbdea136ceee9a88ba1eac"}],"database_specific":{"extracted_events":[{"introduced":"9.10.7"},{"fixed":"9.10.8"},{"introduced":"9.11.3"},{"fixed":"9.11.5"},{"introduced":"9.12.0"},{"fixed":"9.12.3"},{"introduced":"9.13.0"},{"fixed":"9.13.6"},{"introduced":"9.10.7-s1"},{"last_affected":"9.10.7-s1"},{"introduced":"9.10.8-NA"},{"last_affected":"9.10.8-NA"},{"introduced":"9.10.8-rc1"},{"last_affected":"9.10.8-rc1"},{"introduced":"9.10.8-rc2"},{"last_affected":"9.10.8-rc2"},{"introduced":"9.11.5-NA"},{"last_affected":"9.11.5-NA"},{"introduced":"9.11.5-p1"},{"last_affected":"9.11.5-p1"},{"introduced":"9.11.5-rc1"},{"last_affected":"9.11.5-rc1"},{"introduced":"9.12.3-NA"},{"last_affected":"9.12.3-NA"},{"introduced":"9.12.3-p1"},{"last_affected":"9.12.3-p1"},{"introduced":"9.12.3-rc1"},{"last_affected":"9.12.3-rc1"}],"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.7:s1:*:*:supported_preview:*:*:*","cpe:2.3:a:isc:bind:9.10.8:-:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.8:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.10.8:rc2:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.11.5:-:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.11.5:p1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.11.5:rc1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.12.3:-:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.12.3:p1:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.12.3:rc1:*:*:*:*:*:*"]}}],"versions":["9.10.7-s1","9.10.8-NA","9.10.8-rc1","9.10.8-rc2","9.11.5-NA","9.11.5-p1","9.11.5-rc1","9.12.3-NA","9.12.3-p1","9.12.3-rc1","v9.13.5","v9.13.4","v9.13.3","v9.13.2","v9.10.8rc2","v9.13.0","v9.10.7rc1","v9.10.7b1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5744.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}