K42238532: BIND vulnerabilities CVE-2019-6475 and CVE-2019-6476

Security Advisory Description CVE-2019-6475 Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if i...

ISC BIND 9.14.x < 9.14.7 / 9.15.x < 9.15.5 Multiple Vulnerabilities

ISC BIND versions 9.14.6 / 9.15.4 and earlier are affected by multiple vulnerabilities. - A flaw in mirror zone validity checking. It can allow zone data to be spoofed. CVE-2019-6475 - A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if a...

CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

ALPINE-CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

Design/Logic Flaw

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

CVE-2019-6475

CVE-2019-6475 : In ISC BIND, an error in mirror zone validity checks can allow an on-path attacker to replace zone data that was validated with a trust anchor with forged data. Affected: BIND 9.14.0–9.14.6 and 9.15.0–9.15.4. Impact details are as described in the vulnerability entry; no remediati...

CVE-2019-6475 A flaw in mirror zone validity checking can allow zone data to be spoofed

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

CVE-2019-6475

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

CVE-2019-6475: Insufficient Verification of Data Authenticity

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...

PT-2019-18108

Name of the Vulnerable Software and Affected Versions BIND versions 9.14.0 through 9.14.6 BIND versions 9.15.0 through 9.15.4 Description The issue arises from an error in the validity checks for incoming zone data in the mirror zone feature of BIND, allowing an on-path attacker to replace...