CVE-2019-6471 A race condition when discarding malformed packets can cause BIND to exit with an assertion failure

🗓️ 09 Oct 2019 14:17:14Reported by iscType

A race condition in BIND leads to assertion failure when discarding malformed packet

Reporter	Title	Published	Views	Family All 93
ALT Linux	Security fix for the ALT Linux 9 package bind version 9.11.8-alt1	20 Jun 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package bind version 9.11.8-alt1	20 Jun 201900:00	–	altlinux
IBM Security Bulletins	Security Bulletin: IBM i is affected by networking BIND vulnerability CVE-2019-6471.	18 Dec 201914:26	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0025: bind (ALINUX3-SA-2021:0025)	14 May 202500:00	–	nessus
Tenable Nessus	ISC BIND Race Condition Vulnerability (CVE-2019-6471)	28 Jun 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : bind (EulerOS-SA-2019-2096)	12 Nov 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.5.0 : bind (EulerOS-SA-2020-1047)	13 Jan 202000:00	–	nessus
Tenable Nessus	F5 Networks BIG-IP : BIND vulnerability (K10092301)	12 Aug 201900:00	–	nessus
Tenable Nessus	Fedora 29 : 12:dhcp / 32:bind / bind-dyndb-ldap / dnsperf (2019-d04f66e595)	16 Sep 201900:00	–	nessus
Tenable Nessus	Fedora 30 : 12:dhcp / 32:bind / bind-dyndb-ldap / dnsperf (2019-f72801c260)	22 Jul 201900:00	–	nessus

[
  {
    "product": "BIND 9",
    "vendor": "ISC",
    "versions": [
      {
        "status": "affected",
        "version": "BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1."
      }
    ]
  }
]

Source	Link
support	www.support.f5.com/csp/article/K10092301
kb	www.kb.isc.org/docs/cve-2019-6471

09 Oct 2019 19:07Current

5.8Medium risk

Vulners AI Score5.8

CVSS 35.9

EPSS0.0139