CVE-2019-6471

A race condition when discarding malformed packets can cause BIND to exit with an assertion failure

Published: Oct 9, 2019Updated: Nov 21, 2024 Sources: CVE List NVD BDUCWE-362

5.9MEDIUM

Description

A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.

No summary for this CVE yet.

CVSS Vector Breakdown

Exploitability

AV:NAttack Vector

Network

AC:HAttack Complexity

High

PR:NPrivileges Required

None

UI:NUser Interaction

None

Scope

S:UScope

Unchanged

Impact

C:NConfidentiality

None

I:NIntegrity

None

A:HAvailability

High

Open in CVSS calculator →

Weaknesses

CWE-362 CWE-617

Affected Products

commercial·US

big-ip local traffic managerOn-premNetwork Device

Networking Infrastructure / load-balancer-proxy

big-ip application acceleration managerOn-premNetwork Device

Networking Infrastructure / load-balancer-proxy

big-ip advanced firewall managerOn-premSecurity Product

Networking Infrastructure / firewall

big-ip analyticsOn-premNetwork Device

Networking Infrastructure / network-management

big-ip access policy managerOn-premNetwork Device

Networking Infrastructure / firewall

big-ip application security managerOn-premNetwork Device

Networking Infrastructure / firewall

big-ip edge gatewayOn-premNetwork Device

Networking Infrastructure / vpn-gateway

big-ip fraud protection serviceOn-premNetwork Device

Networking Infrastructure

ООО «РусБИТех-Астра»

commercial·RUaka rusbitech-astra

Astra Linux Special EditionOn-premOS

Operating Systems / linux-distro

Astra Linux Special Edition для «Эльбрус»On-premOS

Operating Systems / linux-distro

ISC

commercial·USaka internet systems consortium

BIND 9

Networking Infrastructure

bind

Networking Infrastructure

Сообщество свободного программного обеспечения

oss-projectaka fsf

Debian GNU/LinuxOn-premOS

Operating Systems / linux-distro

Novell Inc.

commercial·US

OpenSUSE LeapOn-premOS

Operating Systems / linux-distro

Internet Systems Consortium

oss-project·USaka isc

BINDOn-premNetwork Device

Networking Infrastructure / dns-dhcp-ntp

and 8 more affected products View all →

Exploitability

Official Patch Available

Is your org exposed to CVE-2019-6471?Request an assessment to establish which checks are appropriate for your systems. Check my exposure

Attack Graph

Products CVE Techniques Tactics

Click technique nodes for MITRE ATT&CK details · drag to pan · Ctrl/⌘ + scroll to zoom, or go fullscreen.

MITRE ATT&CK

2 techniques

Impact

Privilege Escalation

View detailed technique mapping

References

https://nvd.nist.gov/vuln/detail/CVE-2019-6471

nvd.nist.gov

https://security-tracker.debian.org/tracker/CVE-2019-6471

security-tracker.debian.org

https://www.suse.com/security/cve/CVE-2019-6471

suse.com

and 4 more references View all →

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2019-6471 and every CVE in our database. Create a free account — no credit card required.

Create Free Account

Plain-language analysis

Impact assessment and exploitation scenario in plain English

Attack graph visualization

Interactive attack path and kill chain mapping

Exploit details & PoC links

ExploitDB, Metasploit, GitHub PoCs with direct links

Nuclei scanner templates

Ready-to-use vulnerability scanner templates

Full remediation guide

Patch instructions, workarounds, and compliance impact

Interactive AI chat

Ask questions about this vulnerability in natural language

Related vulnerabilities

Semantically similar CVEs and attack patterns

REST API & MCP access

Integrate vulnerability data into your workflows