CVE:CVE-2018-5743
CNNVD:CNNVD-201904-1155
ISC BIND是美国ISC公司的一套实现了DNS协议的开源软件。
ISC BIND中存在安全漏洞，该漏洞源于程序没有充分地限制TCP客户端同时连接的个数。攻击者可利用该漏洞耗尽文件描述符，影响网络连接和文件管理。以下版本受到影响：BIND 9.9.0版本至9.10.8-P1版本，9.11.0版本至9.11.6版本，9.12.0版本至9.12.4版本，9.14.0版本，9.13.0版本至9.13.7版本（9.13 development branch），BIND 9 Supported Preview Edition 9.9.3-S1版本至9.11.5-S3版本至9.11.5-S5版本。
solution:Upgrade f5 big-ip_local_traffic_manager to a higher version than 11.6.5,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.5],[12.1.0,12.1.4],[13.0.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_application_acceleration_manager to a higher version than 11.6.5,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.5],[12.1.0,12.1.4],[13.0.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_advanced_firewall_manager to a higher version than 11.6.5,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.5],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_analytics to a higher version than 11.6.5,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.5],[12.1.0,12.1.4],[13.0.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_access_policy_manager to a higher version than 11.6.5,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.5],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_application_security_manager to a higher version than 11.6.5,12.1.4,13.1.1,14.1.1,15.0.0,and avoid the version [11.5.2,11.6.5],[12.1.0,12.1.4],[13.0.0,13.1.1],[14.0.0,14.1.1],15.0.0; Upgrade f5 big-ip_edge_gateway to a higher version than 11.6.5,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.5],[12.1.0,12.1.4],[13.0.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_fraud_protection_service to a higher version than 11.6.5,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.5],[12.1.0,12.1.4],[13.0.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_global_traffic_manager to a higher version than 11.6.5,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.5],[12.1.0,12.1.4],[13.0.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_link_controller to a higher version than 11.6.5,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.5],[12.1.0,12.1.4],[13.0.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_webaccelerator to a higher version than 11.6.5,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.5],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_policy_enforcement_manager to a higher version than 11.6.5,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.5],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade isc bind to a higher version than 9.10.8,9.11.6,9.12.4,9.13.7,9.9.3:s1,9.10.8:p1,9.11.5:s3,9.11.5:s5,9.14.0,and avoid the version [9.9.0,9.10.8],[9.11.0,9.11.6],[9.12.0,9.12.4],[9.13.0,9.13.7],9.9.3:s1,9.10.8:p1,9.11.5:s3,9.11.5:s5,9.14.0; Upgrade f5 enterprise_manager to a higher version than 3.1.1,and avoid the version 3.1.1; Upgrade f5 big-iq_centralized_management to a higher version than 5.4.0,6.1.0,and avoid the version [5.0.0,5.4.0],[6.0.0,6.1.0]; Upgrade f5 iworkflow to a higher version than 2.3.0,and avoid the version 2.3.0; Upgrade f5 big-ip_domain_name_system to a higher version than 11.6.5,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.5],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0