vulnerability

ISC BIND: A malformed request can trigger an assertion failure in badcache.c (CVE-2017-5754)

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:C/I:N/A:N)

Published

Jan 4, 2018

Added

Mar 8, 2018

Modified

Mar 27, 2026

Description

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.

Solution

upgrade-isc-bind-latest

References

CVE-2017-5754
https://attackerkb.com/topics/CVE-2017-5754
CWE-200
EUVD-EUVD-2017-14831
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-14831

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report