CVE-2019-6469 - An error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with

CVE-2019-6469

Summary

An error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with an assertion failure when processing a response that has malformed RRSIGs. Versions affected: BIND 9.10.5-S1 -> 9.11.6-S1 of BIND 9 Supported Preview Edition.

References

https://kb.isc.org/docs/cve-2019-6469
https://support.f5.com/csp/article/K39751401?utm_source=f5support&utm_medium=RSS

Vulnerable Configurations

cpe:2.3:a:isc:bind:9.10.5:s1:*:*:supported_preview:*:*:*
cpe:2.3:a:isc:bind:9.10.5:s1:*:*:supported_preview:*:*:*
cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:*
cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:*

CVSS

Base:	4.3 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:

CWE

CWE-617

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:N/A:P

refmap via4

confirm

https://kb.isc.org/docs/cve-2019-6469
https://support.f5.com/csp/article/K39751401?utm_source=f5support&utm_medium=RSS

Last major update

24-08-2020 - 17:37

Published

09-10-2019 - 16:15

Last modified

24-08-2020 - 17:37