CVE-2019-6471
A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.
- Score
- CVSS 3.1 5.9 Medium
- Status
- Modified - security-officer@isc.org
- Published
- 2019-10-09
- Last modified
- 2024-09-17
- Weaknesses
- CWE-362, CWE-617
Affected products
- Big-ip Access Policy Manager (F5)
- Big-ip Advanced Firewall Manager (F5)
- Big-ip Analytics (F5)
- Big-ip Application Acceleration Manager (F5)
- Big-ip Application Security Manager (F5)
- Big-ip Domain Name System (F5)
- Big-ip Edge Gateway (F5)
- Big-ip Fraud Protection Service (F5)
- Big-ip Global Traffic Manager (F5)
- Big-ip Link Controller (F5)
- Big-ip Local Traffic Manager (F5)
- Big-ip Policy Enforcement Manager (F5)
- Big-ip Webaccelerator (F5)
- Big-iq Centralized Management (F5)
- Enterprise Manager (F5)
- Iworkflow (F5)
- Bind (Isc)
- Bind 9 (Isc)
References
- https://kb.isc.org/docs/cve-2019-6471
- https://support.f5.com/csp/article/K10092301?utm_source=f5support&%3Butm_medium=RSS
