BIND has a flawed logic vulnerability

🗓️ 21 Nov 2019 00:00:00Reported by China National Vulnerability DatabaseType

BIND domain name server flaw lets a pipelined query bypass the connection limit, causing service denial.

Reporter	Title	Published	Views	Family All 106
ALT Linux	Security fix for the ALT Linux 9 package bind version 9.11.13-alt1	25 Nov 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package bind version 9.11.13-alt1	21 Nov 201900:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Vulnerability in bind affects IBM Integrated Analytics System	10 Nov 202011:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Aug 202122:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in BIND affect Power Hardware Management Console (CVE-2018-5745, CVE-2019-6465 and CVE-2019-6477)	22 Sep 202123:38	–	ibm
Tenable Nessus	Amazon Linux 2 : bind (ALAS-2020-1441)	2 Jul 202000:00	–	nessus
Tenable Nessus	ISC BIND 9.11.0 / 9.11.x < 9.11.13 / 9.11.x < 9.11.13-S1 / 9.12.x < 9.12.5-P2 / 9.14.x < 9.14.8 / 9.15 / 9.15.x < 9.15.6 Vulnerability	6 Dec 201900:00	–	nessus
Tenable Nessus	CentOS 7 : bind (RHSA-2020:1061)	10 Apr 202000:00	–	nessus
Tenable Nessus	Debian DSA-4689-1 : bind9 - security update	20 May 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : bind (EulerOS-SA-2020-1141)	25 Feb 202000:00	–	nessus

Vulners

Node

isc bindRange9.14.1–9.14.7

isc bindRange9.15.0–9.15.5

05 Jan 2020 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 25

CVSS 3.17.5

EPSS0.04022