A race condition when discarding malformed packets can cause BIND to exit with an assertion failure
Priority LOW 32CWE-362Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-617.
Summary
A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.
Why it matters now
EPSS 0.03286 88th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ISC | BIND 9 | BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1. | — | No fix listed | CNA |
- BIND 9 VendorISC Affected BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1. Fixed in — No fix listed CNA
CPE configurations NVD · 65
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* | 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_local_traffic_manager:14.0.0:*:*:*:*:*:*:* | 14.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_local_traffic_manager:14.1.0:*:*:*:*:*:*:* | 14.1.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_local_traffic_manager:15.0.0:*:*:*:*:*:*:* | 15.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* | 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:14.0.0:*:*:*:*:*:*:* | 14.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:14.1.0:*:*:*:*:*:*:* | 14.1.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.0.0:*:*:*:*:*:*:* | 15.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* | 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:14.0.0:*:*:*:*:*:*:* | 14.0.0 | Vulnerable | F5 |
- cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_local_traffic_manager:14.0.0:*:*:*:*:*:*:* Versions 14.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_local_traffic_manager:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_local_traffic_manager:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_acceleration_manager:14.0.0:*:*:*:*:*:*:* Versions 14.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_acceleration_manager:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_advanced_firewall_manager:14.0.0:*:*:*:*:*:*:* Versions 14.0.0 Vulnerable ·F5
Show 55 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:14.1.0:*:*:*:*:*:*:* | 14.1.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.0.0:*:*:*:*:*:*:* | 15.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* | 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_analytics:14.0.0:*:*:*:*:*:*:* | 14.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_analytics:14.1.0:*:*:*:*:*:*:* | 14.1.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_analytics:15.0.0:*:*:*:*:*:*:* | 15.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* | 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_access_policy_manager:14.0.0:*:*:*:*:*:*:* | 14.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_access_policy_manager:14.1.0:*:*:*:*:*:*:* | 14.1.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_access_policy_manager:15.0.0:*:*:*:*:*:*:* | 15.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* | 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_security_manager:14.0.0:*:*:*:*:*:*:* | 14.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_security_manager:14.1.0:*:*:*:*:*:*:* | 14.1.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_security_manager:15.0.0:*:*:*:*:*:*:* | 15.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* | 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_edge_gateway:14.0.0:*:*:*:*:*:*:* | 14.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_edge_gateway:14.1.0:*:*:*:*:*:*:* | 14.1.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_edge_gateway:15.0.0:*:*:*:*:*:*:* | 15.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* | 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_fraud_protection_service:14.0.0:*:*:*:*:*:*:* | 14.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_fraud_protection_service:14.1.0:*:*:*:*:*:*:* | 14.1.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_fraud_protection_service:15.0.0:*:*:*:*:*:*:* | 15.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* | 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_global_traffic_manager:9.2.2:*:*:*:*:*:*:* | 9.2.2 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_global_traffic_manager:14.0.0:*:*:*:*:*:*:* | 14.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_global_traffic_manager:14.1.0:*:*:*:*:*:*:* | 14.1.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_global_traffic_manager:15.0.0:*:*:*:*:*:*:* | 15.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* | 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_link_controller:9.2.2:*:*:*:*:*:*:* | 9.2.2 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_link_controller:14.0.0:*:*:*:*:*:*:* | 14.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_link_controller:14.1.0:*:*:*:*:*:*:* | 14.1.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_link_controller:15.0.0:*:*:*:*:*:*:* | 15.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* | 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_webaccelerator:9.2.2:*:*:*:*:*:*:* | 9.2.2 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_webaccelerator:14.0.0:*:*:*:*:*:*:* | 14.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_webaccelerator:14.1.0:*:*:*:*:*:*:* | 14.1.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_webaccelerator:15.0.0:*:*:*:*:*:*:* | 15.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* | 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:9.2.2:*:*:*:*:*:*:* | 9.2.2 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:14.0.0:*:*:*:*:*:*:* | 14.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:14.1.0:*:*:*:*:*:*:* | 14.1.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.0.0:*:*:*:*:*:*:* | 15.0.0 | Vulnerable | F5 |
| cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* | 9.11.0 – 9.11.7; 9.12.0 – 9.12.3; 9.13.0 – 9.13.7; 9.14.0 – 9.14.2; 9.15.0 – 9.15.5 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:* | 9.11.3 s1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:* | 9.11.7 s1 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.12.4:-:*:*:*:*:*:* | 9.12.4 | Vulnerable | ISC |
| cpe:2.3:a:isc:bind:9.12.4:p1:*:*:*:*:*:* | 9.12.4 p1 | Vulnerable | ISC |
| cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:* | 3.1.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:* | 5.1.0 – 5.4.0; 6.0.0 – 6.1.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:iworkflow:2.3.0:*:*:*:*:*:*:* | 2.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* | 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_domain_name_system:9.2.2:*:*:*:*:*:*:* | 9.2.2 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_domain_name_system:14.0.0:*:*:*:*:*:*:* | 14.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_domain_name_system:14.1.0:*:*:*:*:*:*:* | 14.1.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_domain_name_system:15.0.0:*:*:*:*:*:*:* | 15.0.0 | Vulnerable | F5 |
- cpe:2.3:a:f5:big-ip_advanced_firewall_manager:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_analytics:14.0.0:*:*:*:*:*:*:* Versions 14.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_analytics:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_analytics:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_access_policy_manager:14.0.0:*:*:*:*:*:*:* Versions 14.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_access_policy_manager:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_access_policy_manager:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_security_manager:14.0.0:*:*:*:*:*:*:* Versions 14.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_security_manager:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_security_manager:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_edge_gateway:14.0.0:*:*:*:*:*:*:* Versions 14.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_edge_gateway:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_edge_gateway:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_fraud_protection_service:14.0.0:*:*:*:*:*:*:* Versions 14.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_fraud_protection_service:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_fraud_protection_service:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_global_traffic_manager:9.2.2:*:*:*:*:*:*:* Versions 9.2.2 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_global_traffic_manager:14.0.0:*:*:*:*:*:*:* Versions 14.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_global_traffic_manager:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_global_traffic_manager:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_link_controller:9.2.2:*:*:*:*:*:*:* Versions 9.2.2 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_link_controller:14.0.0:*:*:*:*:*:*:* Versions 14.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_link_controller:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_link_controller:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_webaccelerator:9.2.2:*:*:*:*:*:*:* Versions 9.2.2 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_webaccelerator:14.0.0:*:*:*:*:*:*:* Versions 14.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_webaccelerator:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_webaccelerator:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_policy_enforcement_manager:9.2.2:*:*:*:*:*:*:* Versions 9.2.2 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_policy_enforcement_manager:14.0.0:*:*:*:*:*:*:* Versions 14.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_policy_enforcement_manager:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
- cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* Versions 9.11.0 – 9.11.7; 9.12.0 – 9.12.3; 9.13.0 – 9.13.7; 9.14.0 – 9.14.2; 9.15.0 – 9.15.5 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:* Versions 9.11.3 s1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:* Versions 9.11.7 s1 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.12.4:-:*:*:*:*:*:* Versions 9.12.4 Vulnerable ·ISC
- cpe:2.3:a:isc:bind:9.12.4:p1:*:*:*:*:*:* Versions 9.12.4 p1 Vulnerable ·ISC
- cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:* Versions 3.1.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:* Versions 5.1.0 – 5.4.0; 6.0.0 – 6.1.0 Vulnerable ·F5
- cpe:2.3:a:f5:iworkflow:2.3.0:*:*:*:*:*:*:* Versions 2.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* Versions 11.5.2 – 11.5.9; 11.6.1 – 11.6.4; 12.1.0 – 12.1.4; 13.1.0 – 13.1.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_domain_name_system:9.2.2:*:*:*:*:*:*:* Versions 9.2.2 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_domain_name_system:14.0.0:*:*:*:*:*:*:* Versions 14.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_domain_name_system:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_domain_name_system:15.0.0:*:*:*:*:*:*:* Versions 15.0.0 Vulnerable ·F5
Remediation
Red Hat 1 advisory
- RHSA-2019:1714 Released 2019-07-10 · Red Hat rating Importantbind security update
- Red Hat Enterprise Linux AppStream (v. 8) bind-32:9.11.4-17.P2.el8_0.1, bind-chroot-32:9.11.4-17.P2.el8_0.1, bind-devel-32:9.11.4-17.P2.el8_0.1 +12
- Red Hat Enterprise Linux BaseOS (v. 8) bind-32:9.11.4-17.P2.el8_0.1, bind-export-devel-32:9.11.4-17.P2.el8_0.1, bind-export-libs-32:9.11.4-17.P2.el8_0.1
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2019:1714 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2019:1714 |
Not affected: 3 products
- Red Hat Enterprise Linux 5
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
Timeline
- 2026-10-02 Threatist record created from CVE-2019-6471
- 2026-10-03 Alias added: GHSA-52fp-qxmc-8q94
References
More ISC Bind vulnerabilities
- TI-2015-04610 Assertion failure in ISC BIND named via TKEY queries KEVCVSS 3.1HIGH 7.5
- TI-2023-27571 Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related… CVSS 3.1HIGH 7.5
- TI-2021-07476 A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack CVSS 3.1CRITICAL 9.8
- TI-2023-27773 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… CVSS 3.1HIGH 7.5
- TI-2020-06910 A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c CVSS 3.1HIGH 7.5
- TI-2016-02320 buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x… CVSS 3.0HIGH 7.5
Sources
- CVE-2019-6471 · CVE Program
- CVE-2019-6471 · NVD
- FIRST EPSS
- GHSA-52fp-qxmc-8q94 · GitHub Advisory Database · CC BY 4.0
- CVE-2019-6471 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences