CVE-2018-5742

While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an assertion failure in buffer.c:420. Affects RedHat versions bind-9.9.4-65.el7 -> bind-9.9.4-72.el7. No ISC releases are affected. Other packages from other distributions who made the same error may also be affected.

• CWE-617

• https://access.redhat.com/security/cve/cve-2018-5742Third Party Advisory
• https://access.redhat.com/security/cve/cve-2018-5742Third Party Advisory

Published

Oct 30, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5736An error in zone database reference counting can lead to an …
• CVE-2018-5737A problem with the implementation of the new serve-stale fea…5.9
• CVE-2018-5738Change #4777 (introduced in October 2017) introduced an unfo…5.3
• CVE-2018-5739An extension to hooks capabilities which debuted in Kea 1.4.…6.5
• CVE-2018-5740"deny-answer-aliases" is a little-used feature intended to h…7.5
• CVE-2018-5741To provide fine-grained controls over the ability to use Dyn…6.5
• CVE-2018-5743By design, BIND is intended to limit the number of TCP clien…7.5
• CVE-2018-5744A failure to free memory can occur when processing messages …7.5
• CVE-2018-5745"managed-keys" is a feature which allows a BIND resolver to …4.9
• CVE-2018-5746Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2018-5747In Long Range Zip (aka lrzip) 0.631, there is a use-after-fr…5.5
• CVE-2018-5748qemu/qemu_monitor.c in libvirt allows attackers to cause a d…