All vulnerabilities

Servers and applications

CVE-2018-5745

"managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC validation. Due to an error in the managed-keys feature it is possible for a BIND server which uses managed-keys to exit due to an assertion failure if, during key rollover, a trust anchor's keys are replaced with keys which use an…

Severity
Medium 4.9
Published
9 Oct 2019
Last changed
1 Sept 2026
Added to UpHeron
1 Nov 2026
Exploit chance
2.3% in the next 30 daysHigher than 83% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
BIND 9Servers and applications · cpe:a:isc:bind
  • From 9.13.0 up to 9.13.6
  • Version 9.12.3-p1
  • Version 9.12.3
  • From 9.12.0 up to 9.12.2
All 12 release lines
  • From 9.9.0 up to 9.10.7
  • Version 9.9.3-s1
  • Version 9.10.7
  • Version 9.10.8-p1
  • From 9.11.0 up to 9.11.4
  • Version 9.11.5
  • Version 9.11.5-p1
  • Version 9.11.5-s3
  • From 9.12.0 up to 9.12.2
  • Version 9.12.3
  • Version 9.12.3-p1
  • From 9.13.0 up to 9.13.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-5745
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-5745