CVE-2018-5737: ISC BIND

High severity, CVSS 7.5. EPSS: 10.4% chance of exploitation in the next 30 days.

A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause undesirable behavior from named, such as a recursion loop or excessive logging. Deliberate exploitation of this condition could cause operational problems depending on the particular manifestation -- either degradation or denial of service. Affects BIND 9.12.0 and 9.12.1.

Affected products

• ISC BIND: version 9.12.0 only; version 9.12.1 only
• Netapp Cloud Backup: affected versions not specified
• Netapp Data Ontap Edge: affected versions not specified

Published 2019-01-16. Last modified 2026-06-17.