{"id":"CVE-2018-5743","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-5743","generatedAt":"2026-10-28T21:21:56.380Z","title":"The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers.","description":"By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit the number of simultaneous connections contained an error which could be exploited to grow the number of simultaneous connections beyond this limit. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.6, 9.12.0 -> 9.12.4, 9.14.0. BIND 9 Supported Preview Edition versions 9.9.3-S1 -> 9.11.5-S3, and 9.11.5-S5. Versions 9.13.0 -> 9.13.7 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5743.","published":"2019-10-09T16:15:14.000Z","lastModified":"2026-06-17T02:00:42.000Z","status":"Modified","sourceIdentifier":"security-officer@isc.org","cvss":{"version":"3.1","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-770"],"affected":["f5/big-ip local traffic manager","f5/big-ip application acceleration manager","f5/big-ip advanced firewall manager","f5/big-ip analytics","f5/big-ip access policy manager","f5/big-ip application security manager","f5/big-ip edge gateway","f5/big-ip fraud protection service","f5/big-ip global traffic manager","f5/big-ip link controller","f5/big-ip webaccelerator","f5/big-ip policy enforcement manager","isc/bind","f5/enterprise manager","f5/big-iq centralized management","f5/iworkflow","f5/big-ip domain name system"],"epss":{"score":0.06457,"percentile":0.93698,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (6.46%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://kb.isc.org/docs/cve-2018-5743","tags":["Third Party Advisory"],"source":"security-officer@isc.org"},{"url":"https://support.f5.com/csp/article/K74009656?utm_source=f5support&amp%3Butm_medium=RSS","source":"security-officer@isc.org"},{"url":"https://www.synology.com/security/advisory/Synology_SA_19_20","source":"security-officer@isc.org"},{"url":"https://kb.isc.org/docs/cve-2018-5743","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K74009656?utm_source=f5support&amp%3Butm_medium=RSS","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.synology.com/security/advisory/Synology_SA_19_20","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-5743","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}