{"id":"CVE-2018-5734","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-5734","generatedAt":"2026-10-28T22:41:52.004Z","title":"While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode.","description":"While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2.","published":"2019-01-16T20:29:01.000Z","lastModified":"2026-06-17T02:00:41.000Z","status":"Modified","sourceIdentifier":"security-officer@isc.org","cvss":{"version":"3.0","score":7.5,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-617"],"affected":["isc/bind","netapp/data ontap edge","netapp/solidfire element os management node"],"epss":{"score":0.06287,"percentile":0.93554,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (6.29%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/103189","tags":["Third Party Advisory","VDB Entry"],"source":"security-officer@isc.org"},{"url":"http://www.securitytracker.com/id/1040438","tags":["Third Party Advisory","VDB Entry"],"source":"security-officer@isc.org"},{"url":"https://kb.isc.org/docs/aa-01562","tags":["Vendor Advisory"],"source":"security-officer@isc.org"},{"url":"https://security.netapp.com/advisory/ntap-20180926-0005/","tags":["Third Party Advisory"],"source":"security-officer@isc.org"},{"url":"http://www.securityfocus.com/bid/103189","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1040438","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.isc.org/docs/aa-01562","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20180926-0005/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-5734","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}