[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2018-5741":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T20:55:29.923Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":42,"related":43,"reserved_at":9,"published_at":49,"modified_at":50,"state":51,"summary":52,"references_raw":61,"kevs":108,"epss":109,"epss_history":112,"metrics":378,"affected":391},"CVE-2018-5741","To provide fine-grained controls over the ability to use Dynamic DNS (DDNS) to update records in a zone, BIND 9 provides a feature called update-policy. Various rules can be configured to limit the types of updates that can be performed by a client, depending on the key used when sending the update request. Unfortunately, some rule types were not initially documented, and when documentation for them was added to the Administrator Reference Manual (ARM) in change #3112, the language that was added to the ARM at that time incorrectly described the behavior of two rule types, krb5-subdomain and ms-subdomain. This incorrect documentation could mislead operators into believing that policies they had configured were more restrictive than they actually were. This affects BIND versions prior to BIND 9.11.5 and BIND 9.12.3.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-863","Incorrect Authorization","The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.","weakness","Incomplete","Class","High",[],[],[],[],[24,26,28,30,32,34,36,38,40],{"_key":25},"ALPINE-CVE-2018-5741",{"_key":27},"RHSA-2019:2057",{"_key":29},"SUSE-SU-2020:14400-1",{"_key":31},"SUSE-SU-2020:1914-1",{"_key":33},"SUSE-SU-2020:2914-1",{"_key":35},"OPENSUSE-SU-2020:1699-1",{"_key":37},"OPENSUSE-SU-2020:1701-1",{"_key":39},"UBUNTU-CVE-2018-5741",{"_key":41},"DEBIAN-CVE-2018-5741",[],[44,45,46,47,48],{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},"2019-01-16T20:00:00.000Z","2024-09-17T02:26:39.095Z","Modified",{"cisa_kev":53,"cisa_ransomware":53,"cisa_vendor":9,"epss_severity":54,"epss_score":55,"severity":56,"severity_score":57,"severity_version":58,"severity_source":59,"severity_vector":60,"severity_status":51},false,"low",0.00971,"medium",6.5,"v3.0","cve.org","CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",[62,70,75,81,86,90,95,99,104],{"url":63,"sources":64,"tags":66},"http://www.securityfocus.com/bid/105379",[59,65],"nvd",[67,68,69],"VDB Entry","X Refsource BID","Third Party Advisory",{"url":71,"sources":72,"tags":73},"http://www.securitytracker.com/id/1041674",[59,65],[67,74,69],"X Refsource SECTRACK",{"url":76,"sources":77,"tags":78},"https://kb.isc.org/docs/cve-2018-5741",[59,65],[79,80],"X Refsource CONFIRM","Vendor Advisory",{"url":82,"sources":83,"tags":84},"https://security.gentoo.org/glsa/201903-13",[59,65],[80,85,69],"X Refsource GENTOO",{"url":87,"sources":88,"tags":89},"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03927en_us",[59,65],[79],{"url":91,"sources":92,"tags":93},"https://access.redhat.com/errata/RHSA-2019:2057",[59,65],[80,94],"X Refsource REDHAT",{"url":96,"sources":97,"tags":98},"https://security.netapp.com/advisory/ntap-20190830-0001/",[59,65],[79],{"url":100,"sources":101,"tags":102},"http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html",[59,65],[80,103],"X Refsource SUSE",{"url":105,"sources":106,"tags":107},"http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html",[59,65],[80,103],[],{"date":110,"score":55,"percentile":111},"2026-06-04",0.76971,[113,117,120,123,126,129,131,134,137,140,143,146,148,151,153,157,160,163,166,169,172,175,178,180,183,186,189,192,195,198,201,204,206,209,212,215,217,220,223,226,229,231,234,237,240,243,246,249,252,255,257,260,263,266,269,272,275,278,281,284,287,290,293,296,299,302,305,308,311,314,317,320,322,325,328,331,335,338,342,345,348,351,354,358,360,363,366,369,372,375],{"date":114,"score":115,"percentile":116},"2025-11-04",0.00431,0.61812,{"date":118,"score":115,"percentile":119},"2025-11-05",0.618,{"date":121,"score":115,"percentile":122},"2025-11-06",0.61808,{"date":124,"score":115,"percentile":125},"2025-11-07",0.61827,{"date":127,"score":115,"percentile":128},"2025-11-08",0.61831,{"date":130,"score":115,"percentile":125},"2025-11-09",{"date":132,"score":115,"percentile":133},"2025-11-10",0.61807,{"date":135,"score":115,"percentile":136},"2025-11-11",0.61821,{"date":138,"score":115,"percentile":139},"2025-11-12",0.61846,{"date":141,"score":115,"percentile":142},"2025-11-13",0.61853,{"date":144,"score":115,"percentile":145},"2025-11-14",0.61862,{"date":147,"score":115,"percentile":142},"2025-11-15",{"date":149,"score":115,"percentile":150},"2025-11-16",0.61843,{"date":152,"score":115,"percentile":139},"2025-11-17",{"date":154,"score":155,"percentile":156},"2025-11-18",0.01685,0.80697,{"date":158,"score":155,"percentile":159},"2025-11-19",0.80698,{"date":161,"score":155,"percentile":162},"2025-11-20",0.80704,{"date":164,"score":115,"percentile":165},"2025-11-21",0.61852,{"date":167,"score":115,"percentile":168},"2025-11-22",0.61858,{"date":170,"score":115,"percentile":171},"2025-11-23",0.6184,{"date":173,"score":115,"percentile":174},"2025-11-24",0.61833,{"date":176,"score":115,"percentile":177},"2025-11-25",0.61839,{"date":179,"score":115,"percentile":171},"2025-11-26",{"date":181,"score":115,"percentile":182},"2025-11-27",0.61848,{"date":184,"score":115,"percentile":185},"2025-11-28",0.61829,{"date":187,"score":115,"percentile":188},"2025-11-29",0.61804,{"date":190,"score":115,"percentile":191},"2025-11-30",0.61795,{"date":193,"score":115,"percentile":194},"2025-12-01",0.61945,{"date":196,"score":115,"percentile":197},"2025-12-02",0.61963,{"date":199,"score":115,"percentile":200},"2025-12-03",0.61964,{"date":202,"score":115,"percentile":203},"2025-12-04",0.61793,{"date":205,"score":115,"percentile":188},"2025-12-05",{"date":207,"score":115,"percentile":208},"2025-12-06",0.61802,{"date":210,"score":115,"percentile":211},"2025-12-07",0.61796,{"date":213,"score":115,"percentile":214},"2025-12-08",0.61803,{"date":216,"score":115,"percentile":171},"2025-12-09",{"date":218,"score":115,"percentile":219},"2025-12-10",0.61885,{"date":221,"score":115,"percentile":222},"2025-12-11",0.61904,{"date":224,"score":115,"percentile":225},"2025-12-12",0.61928,{"date":227,"score":115,"percentile":228},"2025-12-13",0.61936,{"date":230,"score":115,"percentile":228},"2025-12-14",{"date":232,"score":115,"percentile":233},"2025-12-15",0.61918,{"date":235,"score":115,"percentile":236},"2025-12-16",0.61935,{"date":238,"score":115,"percentile":239},"2025-12-17",0.61949,{"date":241,"score":115,"percentile":242},"2025-12-18",0.61985,{"date":244,"score":115,"percentile":245},"2025-12-19",0.61998,{"date":247,"score":115,"percentile":248},"2025-12-20",0.61999,{"date":250,"score":115,"percentile":251},"2025-12-21",0.6199,{"date":253,"score":115,"percentile":254},"2025-12-22",0.61982,{"date":256,"score":115,"percentile":248},"2025-12-23",{"date":258,"score":115,"percentile":259},"2025-12-24",0.62007,{"date":261,"score":115,"percentile":262},"2025-12-25",0.62038,{"date":264,"score":115,"percentile":265},"2025-12-26",0.62033,{"date":267,"score":115,"percentile":268},"2025-12-27",0.62073,{"date":270,"score":115,"percentile":271},"2025-12-28",0.6201,{"date":273,"score":115,"percentile":274},"2025-12-29",0.62008,{"date":276,"score":115,"percentile":277},"2025-12-30",0.62026,{"date":279,"score":115,"percentile":280},"2025-12-31",0.62047,{"date":282,"score":115,"percentile":283},"2026-01-01",0.62231,{"date":285,"score":115,"percentile":286},"2026-01-02",0.62217,{"date":288,"score":115,"percentile":289},"2026-01-03",0.62214,{"date":291,"score":115,"percentile":292},"2026-01-04",0.62016,{"date":294,"score":115,"percentile":295},"2026-01-05",0.62006,{"date":297,"score":115,"percentile":298},"2026-01-06",0.62015,{"date":300,"score":115,"percentile":301},"2026-01-07",0.62035,{"date":303,"score":115,"percentile":304},"2026-01-08",0.62058,{"date":306,"score":115,"percentile":307},"2026-01-09",0.6206,{"date":309,"score":115,"percentile":310},"2026-01-10",0.62053,{"date":312,"score":115,"percentile":313},"2026-01-11",0.62041,{"date":315,"score":115,"percentile":316},"2026-01-12",0.62018,{"date":318,"score":115,"percentile":319},"2026-01-13",0.61996,{"date":321,"score":115,"percentile":262},"2026-01-14",{"date":323,"score":115,"percentile":324},"2026-01-15",0.62037,{"date":326,"score":115,"percentile":327},"2026-01-16",0.62056,{"date":329,"score":55,"percentile":330},"2026-01-17",0.76148,{"date":332,"score":333,"percentile":334},"2026-01-18",0.00834,0.74105,{"date":336,"score":333,"percentile":337},"2026-01-19",0.74095,{"date":339,"score":340,"percentile":341},"2026-01-20",0.00835,0.7412,{"date":343,"score":340,"percentile":344},"2026-01-21",0.74123,{"date":346,"score":340,"percentile":347},"2026-01-22",0.74129,{"date":349,"score":340,"percentile":350},"2026-01-23",0.74159,{"date":352,"score":340,"percentile":353},"2026-01-24",0.74168,{"date":355,"score":356,"percentile":357},"2026-01-25",0.00998,0.7652,{"date":359,"score":356,"percentile":357},"2026-01-26",{"date":361,"score":356,"percentile":362},"2026-01-27",0.76521,{"date":364,"score":356,"percentile":365},"2026-01-28",0.7653,{"date":367,"score":356,"percentile":368},"2026-01-29",0.76524,{"date":370,"score":356,"percentile":371},"2026-01-30",0.76529,{"date":373,"score":356,"percentile":374},"2026-01-31",0.76525,{"date":376,"score":356,"percentile":377},"2026-02-01",0.76644,[379,384],{"source":59,"cvss_v2_0":9,"cvss_v3_0":380,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":57,"baseSeverity":381,"vectorString":60,"impactScore":382,"exploitabilityScore":383},"MEDIUM",6,7.2,{"source":65,"cvss_v2_0":385,"cvss_v3_0":390,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":386,"baseSeverity":9,"vectorString":387,"impactScore":388,"exploitabilityScore":389},4,"AV:N/AC:L/Au:S/C:N/I:P/A:N",2.9,8,{"baseScore":57,"baseSeverity":381,"vectorString":60,"impactScore":382,"exploitabilityScore":383},[392,408],{"ecosystem":9,"name":393,"vendor":394,"product":393,"cpe_part":395,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":396},"bind","isc","a",[397,403],{"version":398,"is_range":399,"range_type":400,"version_start":9,"version_start_type":9,"version_end":401,"version_end_type":402,"fixed_in":9},"lt9.11.5",true,"cpe","9.11.5","excluding",{"version":404,"is_range":399,"range_type":400,"version_start":405,"version_start_type":406,"version_end":407,"version_end_type":402,"fixed_in":9},"gte9.12.0_lt9.12.3","9.12.0","including","9.12.3",{"ecosystem":9,"name":409,"vendor":394,"product":410,"cpe_part":395,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":411},"BIND 9","bind 9",[412],{"version":413,"is_range":53,"range_type":59,"version_start":413,"version_start_type":406,"version_end":413,"version_end_type":406,"fixed_in":9},"BIND 9 Versions prior to BIND 9.11.5 and BIND 9.12.3"]