Unrated severityNVD Advisory· Published Oct 9, 2019· Updated Sep 17, 2024
A race condition when discarding malformed packets can cause BIND to exit with an assertion failure
CVE-2019-6471
Description
A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
29>= 9.11.0, <= 9.11.7 | >= 9.12.0, <= 9.12.4-P1 | >= 9.14.0, <= 9.14.2 | 9.13.x | 9.15.0 | >= 9.11.3-S1, <= 9.11.7-S1+ 1 more
- (no CPE)range: >= 9.11.0, <= 9.11.7 | >= 9.12.0, <= 9.12.4-P1 | >= 9.14.0, <= 9.14.2 | 9.13.x | 9.15.0 | >= 9.11.3-S1, <= 9.11.7-S1
- (no CPE)range: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.
- osv-coords27 versionspkg:apk/chainguard/bindpkg:apk/chainguard/bind-devpkg:apk/chainguard/bind-dnssec-rootpkg:apk/chainguard/bind-dnssec-toolspkg:apk/chainguard/bind-docpkg:apk/chainguard/bind-libspkg:apk/chainguard/bind-pluginspkg:apk/chainguard/bind-toolspkg:apk/wolfi/bindpkg:apk/wolfi/bind-devpkg:apk/wolfi/bind-dnssec-rootpkg:apk/wolfi/bind-dnssec-toolspkg:apk/wolfi/bind-docpkg:apk/wolfi/bind-libspkg:apk/wolfi/bind-pluginspkg:apk/wolfi/bind-toolspkg:rpm/opensuse/bind&distro=openSUSE%20Leap%2015.0pkg:rpm/opensuse/bind&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/bind&distro=openSUSE%20Tumbleweedpkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP1pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4
< 0+ 26 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 9.11.2-lp150.8.16.1
- (no CPE)range: < 9.11.2-lp151.11.6.1
- (no CPE)range: < 9.16.20-1.4
- (no CPE)range: < 9.11.2-3.10.1
- (no CPE)range: < 9.11.2-12.13.2
- (no CPE)range: < 9.11.2-12.13.2
- (no CPE)range: < 9.11.2-12.13.2
- (no CPE)range: < 9.11.2-12.13.2
- (no CPE)range: < 9.11.2-3.10.1
- (no CPE)range: < 9.11.2-3.10.1
- (no CPE)range: < 9.11.2-3.10.1
Patches
Vulnerability mechanics
References
2- kb.isc.org/docs/cve-2019-6471mitrex_refsource_CONFIRM
- support.f5.com/csp/article/K10092301mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.