CVE-2018-5743 — high severity vulnerability | Dragons Community

Signals

NVD · CVE-2026-64604 · In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8NVD · CVE-2026-64603 · In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify handler against recursion Since commit e2ffcda1NVD · CVE-2026-64602 · In the Linux kernel, the following vulnerability has been resolved: iio: adc: spear: Initialize completion before requesting IRQ In the report from Jaeyoung ChuNVD · CVE-2026-64601 · In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on eachCISA KEV · CVE-2026-63077 · 9.8 · JetBrains TeamCity Deserialization of Untrusted Data Vulnerability · Added 2026-08-05 · Due 2026-08-08CISA KEV · CVE-2026-18556 · 7.4 · N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability · Added 2026-08-04 · Due 2026-08-07NVD · CVE-2026-64604 · In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8NVD · CVE-2026-64603 · In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify handler against recursion Since commit e2ffcda1NVD · CVE-2026-64602 · In the Linux kernel, the following vulnerability has been resolved: iio: adc: spear: Initialize completion before requesting IRQ In the report from Jaeyoung ChuNVD · CVE-2026-64601 · In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on eachCISA KEV · CVE-2026-63077 · 9.8 · JetBrains TeamCity Deserialization of Untrusted Data Vulnerability · Added 2026-08-05 · Due 2026-08-08CISA KEV · CVE-2026-18556 · 7.4 · N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability · Added 2026-08-04 · Due 2026-08-07

DRAGONS COMMUNITY

CVE-2018-5743

· HIGHModified

CVSS v3.1

7.5

EPSS

6.46%

Published

Oct 9, 2019

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit the number of simultaneous connections contained an error which could be exploited to grow the number of simultaneous connections beyond this limit. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.6, 9.12.0 -> 9.12.4, 9.14.0. BIND 9 Supported Preview Edition versions 9.9.3-S1 -> 9.11.5-S3, and 9.11.5-S5. Versions 9.13.0 -> 9.13.7 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5743.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-770

Affected Products (78)

f5 · big-ip_local_traffic_managervulnerable

f5 · big-ip_local_traffic_managervulnerable

f5 · big-ip_local_traffic_managervulnerable

f5 · big-ip_local_traffic_managervulnerable

f5 · big-ip_local_traffic_managervulnerable

f5 · big-ip_application_acceleration_managervulnerable

f5 · big-ip_application_acceleration_managervulnerable

f5 · big-ip_application_acceleration_managervulnerable

f5 · big-ip_application_acceleration_managervulnerable

f5 · big-ip_application_acceleration_managervulnerable

f5 · big-ip_advanced_firewall_managervulnerable

f5 · big-ip_advanced_firewall_managervulnerable

f5 · big-ip_advanced_firewall_managervulnerable

f5 · big-ip_advanced_firewall_managervulnerable

f5 · big-ip_advanced_firewall_managervulnerable

f5 · big-ip_analyticsvulnerable

f5 · big-ip_analyticsvulnerable

f5 · big-ip_analyticsvulnerable

f5 · big-ip_analyticsvulnerable

f5 · big-ip_analyticsvulnerable

f5 · big-ip_access_policy_managervulnerable

f5 · big-ip_access_policy_managervulnerable

f5 · big-ip_access_policy_managervulnerable

f5 · big-ip_access_policy_managervulnerable

f5 · big-ip_access_policy_managervulnerable

f5 · big-ip_application_security_managervulnerable

f5 · big-ip_application_security_managervulnerable

f5 · big-ip_application_security_managervulnerable

f5 · big-ip_application_security_managervulnerable

f5 · big-ip_application_security_managervulnerable

f5 · big-ip_edge_gatewayvulnerable

f5 · big-ip_edge_gatewayvulnerable

f5 · big-ip_edge_gatewayvulnerable

f5 · big-ip_edge_gatewayvulnerable

f5 · big-ip_edge_gatewayvulnerable

f5 · big-ip_fraud_protection_servicevulnerable

f5 · big-ip_fraud_protection_servicevulnerable

f5 · big-ip_fraud_protection_servicevulnerable

f5 · big-ip_fraud_protection_servicevulnerable

f5 · big-ip_fraud_protection_servicevulnerable

f5 · big-ip_global_traffic_managervulnerable

f5 · big-ip_global_traffic_managervulnerable

f5 · big-ip_global_traffic_managervulnerable

f5 · big-ip_global_traffic_managervulnerable

f5 · big-ip_global_traffic_managervulnerable

f5 · big-ip_link_controllervulnerable

f5 · big-ip_link_controllervulnerable

f5 · big-ip_link_controllervulnerable

f5 · big-ip_link_controllervulnerable

f5 · big-ip_link_controllervulnerable

...and 28 more

References (6)

https://kb.isc.org/docs/cve-2018-5743

Third Party Advisory

https://support.f5.com/csp/article/K74009656?utm_source=f5support&amp%3Butm_medium=RSS

https://www.synology.com/security/advisory/Synology_SA_19_20

https://kb.isc.org/docs/cve-2018-5743

Third Party Advisory

https://support.f5.com/csp/article/K74009656?utm_source=f5support&amp%3Butm_medium=RSS

https://www.synology.com/security/advisory/Synology_SA_19_20

KEV Catalog EPSS Scores Vendors All CVEs