CVE:CVE-2018-5740
CNNVD:CNNVD-201808-416
ISC BIND是美国ISC公司的一套实现了DNS协议的开源软件。
ISC BIND中存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。以下产品及版本受到影响：ISC BIND 9.7.0版本至9.8.8版本，9.9.0版本至9.9.13版本，9.10.0版本至9.10.8版本，9.11.0版本至9.11.4版本，9.12.0版本至9.12.2版本，9.13.0版本至9.13.2版本。
solution:Upgrade isc bind to a higher version than 9.8.8,9.9.13,9.10.8,9.11.4,9.12.2,9.13.2,and avoid the version [9.7.0,9.8.8),[9.9.0,9.9.13),[9.10.0,9.10.8),[9.11.0,9.11.4),[9.12.0,9.12.2),[9.13.0,9.13.2); Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.5,7.6,and avoid the version 7.5,7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade netapp data_ontap_edge to a higher version than -; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,and avoid the version 12.04,14.04,16.04,18.04; Upgrade hp hp-ux to a higher version than -; Upgrade opensuse leap to a higher version than 15.0,15.1,42.3,and avoid the version 15.0,15.1,42.3