CVE-2019-6471

2019-06-1900:00:00

ubuntu.com

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

44.2%

JSON

A race condition which may occur when discarding malformed packets can
result in BIND exiting due to a REQUIRE assertion failure in dispatch.c.
Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 ->
9.14.2. Also all releases of the BIND 9.13 development branch and version
9.15.0 of the BIND 9.15 development branch and BIND Supported Preview
Edition versions 9.11.3-S1 -> 9.11.7-S1.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchbind9< 1:9.11.3+dfsg-1ubuntu1.8UNKNOWN
ubuntu18.10noarchbind9< 1:9.11.4+dfsg-3ubuntu5.4UNKNOWN
ubuntu19.04noarchbind9< 1:9.11.5.P1+dfsg-1ubuntu2.5UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	bind9	< 1:9.11.3+dfsg-1ubuntu1.8	UNKNOWN
ubuntu	18.10	noarch	bind9	< 1:9.11.4+dfsg-3ubuntu5.4	UNKNOWN
ubuntu	19.04	noarch	bind9	< 1:9.11.5.P1+dfsg-1ubuntu2.5	UNKNOWN