{"id":"ALPINE-CVE-2018-5743","details":"By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit the number of simultaneous connections contained an error which could be exploited to grow the number of simultaneous connections beyond this limit. Versions affected: BIND 9.9.0 -\u003e 9.10.8-P1, 9.11.0 -\u003e 9.11.6, 9.12.0 -\u003e 9.12.4, 9.14.0. BIND 9 Supported Preview Edition versions 9.9.3-S1 -\u003e 9.11.5-S3, and 9.11.5-S5. Versions 9.13.0 -\u003e 9.13.7 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5743.","modified":"2026-07-06T00:31:17.644525637Z","published":"2019-10-09T16:15:13.763Z","upstream":["CVE-2018-5743"],"references":[{"type":"ADVISORY","url":"https://security.alpinelinux.org/vuln/CVE-2018-5743"}],"affected":[{"package":{"name":"bind","ecosystem":"Alpine:v3.10","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.14.1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.11","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.14.1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.12","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.14.1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.13","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.14.1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.14","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.14.1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.15","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.14.1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.16","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.14.1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.17","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.14.1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.18","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.14.1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.19","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.14.1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.20","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.14.1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.21","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.14.1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.22","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.14.1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.23","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.14.1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.24","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.14.1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.6","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.11.6_p1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.7","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.11.6_p1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.8","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.12.4_p1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}},{"package":{"name":"bind","ecosystem":"Alpine:v3.9","purl":"pkg:apk/alpine/bind?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.9.0"},{"fixed":"9.12.4_p1-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2018-5743.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}