CVE-2018-5744

A failure to free memory can occur when processing messages having a specific combination of EDNS options. Versions affected are: BIND 9.10.7 -> 9.10.8-P1, 9.11.3 -> 9.11.5-P1, 9.12.0 -> 9.12.3-P1, and versions 9.10.7-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected.

• CWE-772

• https://kb.isc.org/docs/cve-2018-5744Vendor Advisory
• https://kb.isc.org/docs/cve-2018-5744Vendor Advisory

Published

Oct 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5738Change #4777 (introduced in October 2017) introduced an unfo…5.3
• CVE-2018-5739An extension to hooks capabilities which debuted in Kea 1.4.…6.5
• CVE-2018-5740"deny-answer-aliases" is a little-used feature intended to h…7.5
• CVE-2018-5741To provide fine-grained controls over the ability to use Dyn…6.5
• CVE-2018-5742While backporting a feature for a newer branch of BIND9, Red…7.5
• CVE-2018-5743By design, BIND is intended to limit the number of TCP clien…7.5
• CVE-2018-5745"managed-keys" is a feature which allows a BIND resolver to …4.9
• CVE-2018-5746Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2018-5747In Long Range Zip (aka lrzip) 0.631, there is a use-after-fr…5.5
• CVE-2018-5748qemu/qemu_monitor.c in libvirt allows attackers to cause a d…
• CVE-2018-5749install.php in Minecraft Servers List Lite before commit c1c…
• CVE-2018-5750The acpi_smbus_hc_add function in drivers/acpi/sbshc.c in th…