CVE-2018-5741
published 2019-01-16CVE-2018-5741: To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides a feature called update-policy…
PriorityP338medium6.5CVSS 3.0
AVNACLPRLUINSUCNIHAN
EPSS
3.48%
87.9th percentile
To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update request. Unfortunately, some rule types were not initially documented, and when documentation for them was added to the Administrator Reference Manual (ARM) in change #3112, the language that was added to the ARM at that time incorrectly described the behavior of two rule types, krb5-subdomain and ms-subdomain. This incorrect documentation could mislead operators into believing that policies they had configured were more restrictive than they actually were. This affects BIND versions prior to BIND 9.11.5 and BIND 9.12.3.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | bind9 | < bind9 1:9.11.5+dfsg-1 (bookworm) | bind9 1:9.11.5+dfsg-1 (bookworm) |
| isc | bind | < 9.11.5 | 9.11.5 |
| isc | bind | >= 9.12.0 < 9.12.3 | 9.12.3 |
| isc | bind9 | >= 0 < 1:9.11.5+dfsg-1 | 1:9.11.5+dfsg-1 |
| isc | bind9 | >= 0 < 1:9.11.5+dfsg-1 | 1:9.11.5+dfsg-1 |
| isc | bind9 | >= 0 < 1:9.11.5+dfsg-1 | 1:9.11.5+dfsg-1 |
| isc | bind9 | >= 0 < 1:9.11.5+dfsg-1 | 1:9.11.5+dfsg-1 |
| isc | bind_9 | — | — |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
osv6.5MEDIUM
vendor_debian6.5LOW
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies
vendor_redhat·2018-09-20·CVSS 6.5
CVE-2018-5741 [MEDIUM] CWE-284 bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies
bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies
To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update request. Unfortunately, some rule types were not initially documented, and when documentation for them was added to the Administrator Reference Manual (ARM) in change #3112, the language that was added to the ARM at that time incorrectly described the behavior of two rule types, krb5-subdomain and ms-subdomain. This incorrect documentation could mislead operators into believing that policies they had configured wer
Debian
CVE-2018-5741: bind9 - To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to u...
vendor_debian·2018·CVSS 6.5
CVE-2018-5741 [MEDIUM] CVE-2018-5741: bind9 - To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to u...
To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update request. Unfortunately, some rule types were not initially documented, and when documentation for them was added to the Administrator Reference Manual (ARM) in change #3112, the language that was added to the ARM at that time incorrectly described the behavior of two rule types, krb5-subdomain and ms-subdomain. This incorrect documentation could mislead operators into believing that policies they had configured were more restrictive than they actually were. This affects BIND versions prior to BI
GHSA
GHSA-ghpp-72v8-mpmv: To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides a feature called update-polic
ghsa_unreviewed·2022-05-13
CVE-2018-5741 [MEDIUM] CWE-863 GHSA-ghpp-72v8-mpmv: To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides a feature called update-polic
To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update request. Unfortunately, some rule types were not initially documented, and when documentation for them was added to the Administrator Reference Manual (ARM) in change #3112, the language that was added to the ARM at that time incorrectly described the behavior of two rule types, krb5-subdomain and ms-subdomain. This incorrect documentation could mislead operators into believing that policies they had configured were more restrictive than they actually were. This affects BIND versions prior to BI
OSV
CVE-2018-5741: To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides a feature called update-polic
osv·2019-01-16·CVSS 6.5
CVE-2018-5741 [MEDIUM] CVE-2018-5741: To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides a feature called update-polic
To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update request. Unfortunately, some rule types were not initially documented, and when documentation for them was added to the Administrator Reference Manual (ARM) in change #3112, the language that was added to the ARM at that time incorrectly described the behavior of two rule types, krb5-subdomain and ms-subdomain. This incorrect documentation could mislead operators into believing that policies they had configured were more restrictive than they actually were. This affects BIND versions prior to BI
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2018-5741 bind99: bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies [fedora-all]
bugzilla·2018-09-20·CVSS 6.5
CVE-2018-5741 [MEDIUM] CVE-2018-5741 bind99: bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies [fedora-all]
CVE-2018-5741 bind99: bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this iss
Bugzilla
CVE-2018-5741 bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies [fedora-all]
bugzilla·2018-09-20·CVSS 6.5
CVE-2018-5741 [MEDIUM] CVE-2018-5741 bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies [fedora-all]
CVE-2018-5741 bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affec
Bugzilla
CVE-2018-5741 bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies
bugzilla·2018-09-20·CVSS 6.5
CVE-2018-5741 [MEDIUM] CVE-2018-5741 bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies
CVE-2018-5741 bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies
ISC BIND before releases 9.11.4-P2 and 9.12.2-P2 does not properly document the behaviour of the krb5-subdomain and ms-subdomain update policies. This incorrect documentation could mislead operators into believing that policies they had configured were more restrictive than they actually were.
The krb5-subdomain and ms-subdomain update policy rule types permit updates from any client authenticated with a valid Kerberos or Windows machine principal from the REALM specified in the identity field, to modify records in the zone at or below the name specified in the name field. The incorrect documentation, however, indicated that the policy would be restricted to names at or below the machine's name
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.htmlhttp://www.securityfocus.com/bid/105379http://www.securitytracker.com/id/1041674https://access.redhat.com/errata/RHSA-2019:2057https://kb.isc.org/docs/cve-2018-5741https://security.gentoo.org/glsa/201903-13https://security.netapp.com/advisory/ntap-20190830-0001/https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03927en_ushttp://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.htmlhttp://www.securityfocus.com/bid/105379http://www.securitytracker.com/id/1041674https://access.redhat.com/errata/RHSA-2019:2057https://kb.isc.org/docs/cve-2018-5741https://security.gentoo.org/glsa/201903-13https://security.netapp.com/advisory/ntap-20190830-0001/https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03927en_us
2019-01-16
Published