CVE-2019-6471 A race condition when discarding malformed packets can cause BIND to exit with an assertion failure
MediumCVSS 5.9
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/bind9(Debian:12) | < 1:9.11.5.P4+dfsg-5.1 | 1:9.11.5.P4+dfsg-5.1 |
| debian/bind9(Debian:13) | < 1:9.11.5.P4+dfsg-5.1 | 1:9.11.5.P4+dfsg-5.1 |
| debian/bind9(Debian:14) | < 1:9.11.5.P4+dfsg-5.1 | 1:9.11.5.P4+dfsg-5.1 |
| f5 big-ip local traffic manager | >= 11.5.2, <= 11.5.9 | No fix listed |
| f5 big-ip local traffic manager | >= 11.6.1, <= 11.6.4 | No fix listed |
| f5 big-ip local traffic manager | >= 12.1.0, <= 12.1.4 | No fix listed |
| f5 big-ip local traffic manager | >= 13.1.0, <= 13.1.1 | No fix listed |
| f5 big-ip local traffic manager | = 14.0.0 | No fix listed |
| f5 big-ip local traffic manager | = 14.1.0 | No fix listed |
| f5 big-ip local traffic manager | = 15.0.0 | No fix listed |
| f5 big-ip application acceleration manager | >= 11.5.2, <= 11.5.9 | No fix listed |
| f5 big-ip application acceleration manager | >= 11.6.1, <= 11.6.4 | No fix listed |
| f5 big-ip application acceleration manager | >= 12.1.0, <= 12.1.4 | No fix listed |
| f5 big-ip application acceleration manager | >= 13.1.0, <= 13.1.1 | No fix listed |
| f5 big-ip application acceleration manager | = 14.0.0 | No fix listed |
| f5 big-ip application acceleration manager | = 14.1.0 | No fix listed |
| f5 big-ip application acceleration manager | = 15.0.0 | No fix listed |
| f5 big-ip advanced firewall manager | >= 11.5.2, <= 11.5.9 | No fix listed |
| f5 big-ip advanced firewall manager | >= 11.6.1, <= 11.6.4 | No fix listed |
| f5 big-ip advanced firewall manager | >= 12.1.0, <= 12.1.4 | No fix listed |
| f5 big-ip advanced firewall manager | >= 13.1.0, <= 13.1.1 | No fix listed |
| f5 big-ip advanced firewall manager | = 14.0.0 | No fix listed |
| f5 big-ip advanced firewall manager | = 14.1.0 | No fix listed |
| f5 big-ip advanced firewall manager | = 15.0.0 | No fix listed |
| f5 big-ip analytics | >= 11.5.2, <= 11.5.9 | No fix listed |
Show 106 more
| Product | Affected versions | Fixed in |
|---|---|---|
| f5 big-ip analytics | >= 11.6.1, <= 11.6.4 | No fix listed |
| f5 big-ip analytics | >= 12.1.0, <= 12.1.4 | No fix listed |
| f5 big-ip analytics | >= 13.1.0, <= 13.1.1 | No fix listed |
| f5 big-ip analytics | = 14.0.0 | No fix listed |
| f5 big-ip analytics | = 14.1.0 | No fix listed |
| f5 big-ip analytics | = 15.0.0 | No fix listed |
| f5 big-ip access policy manager | >= 11.5.2, <= 11.5.9 | No fix listed |
| f5 big-ip access policy manager | >= 11.6.1, <= 11.6.4 | No fix listed |
| f5 big-ip access policy manager | >= 12.1.0, <= 12.1.4 | No fix listed |
| f5 big-ip access policy manager | >= 13.1.0, <= 13.1.1 | No fix listed |
| f5 big-ip access policy manager | = 14.0.0 | No fix listed |
| f5 big-ip access policy manager | = 14.1.0 | No fix listed |
| f5 big-ip access policy manager | = 15.0.0 | No fix listed |
| f5 big-ip application security manager | >= 11.5.2, <= 11.5.9 | No fix listed |
| f5 big-ip application security manager | >= 11.6.1, <= 11.6.4 | No fix listed |
| f5 big-ip application security manager | >= 12.1.0, <= 12.1.4 | No fix listed |
| f5 big-ip application security manager | >= 13.1.0, <= 13.1.1 | No fix listed |
| f5 big-ip application security manager | = 14.0.0 | No fix listed |
| f5 big-ip application security manager | = 14.1.0 | No fix listed |
| f5 big-ip application security manager | = 15.0.0 | No fix listed |
| f5 big-ip edge gateway | >= 11.5.2, <= 11.5.9 | No fix listed |
| f5 big-ip edge gateway | >= 11.6.1, <= 11.6.4 | No fix listed |
| f5 big-ip edge gateway | >= 12.1.0, <= 12.1.4 | No fix listed |
| f5 big-ip edge gateway | >= 13.1.0, <= 13.1.1 | No fix listed |
| f5 big-ip edge gateway | = 14.0.0 | No fix listed |
| f5 big-ip edge gateway | = 14.1.0 | No fix listed |
| f5 big-ip edge gateway | = 15.0.0 | No fix listed |
| f5 big-ip fraud protection service | >= 11.5.2, <= 11.5.9 | No fix listed |
| f5 big-ip fraud protection service | >= 11.6.1, <= 11.6.4 | No fix listed |
| f5 big-ip fraud protection service | >= 12.1.0, <= 12.1.4 | No fix listed |
| f5 big-ip fraud protection service | >= 13.1.0, <= 13.1.1 | No fix listed |
| f5 big-ip fraud protection service | = 14.0.0 | No fix listed |
| f5 big-ip fraud protection service | = 14.1.0 | No fix listed |
| f5 big-ip fraud protection service | = 15.0.0 | No fix listed |
| f5 big-ip global traffic manager | >= 11.5.2, <= 11.5.9 | No fix listed |
| f5 big-ip global traffic manager | >= 11.6.1, <= 11.6.4 | No fix listed |
| f5 big-ip global traffic manager | >= 12.1.0, <= 12.1.4 | No fix listed |
| f5 big-ip global traffic manager | >= 13.1.0, <= 13.1.1 | No fix listed |
| f5 big-ip global traffic manager | = 9.2.2 | No fix listed |
| f5 big-ip global traffic manager | = 14.0.0 | No fix listed |
| f5 big-ip global traffic manager | = 14.1.0 | No fix listed |
| f5 big-ip global traffic manager | = 15.0.0 | No fix listed |
| f5 big-ip link controller | >= 11.5.2, <= 11.5.9 | No fix listed |
| f5 big-ip link controller | >= 11.6.1, <= 11.6.4 | No fix listed |
| f5 big-ip link controller | >= 12.1.0, <= 12.1.4 | No fix listed |
| f5 big-ip link controller | >= 13.1.0, <= 13.1.1 | No fix listed |
| f5 big-ip link controller | = 9.2.2 | No fix listed |
| f5 big-ip link controller | = 14.0.0 | No fix listed |
| f5 big-ip link controller | = 14.1.0 | No fix listed |
| f5 big-ip link controller | = 15.0.0 | No fix listed |
| f5 big-ip webaccelerator | >= 11.5.2, <= 11.5.9 | No fix listed |
| f5 big-ip webaccelerator | >= 11.6.1, <= 11.6.4 | No fix listed |
| f5 big-ip webaccelerator | >= 12.1.0, <= 12.1.4 | No fix listed |
| f5 big-ip webaccelerator | >= 13.1.0, <= 13.1.1 | No fix listed |
| f5 big-ip webaccelerator | = 9.2.2 | No fix listed |
| f5 big-ip webaccelerator | = 14.0.0 | No fix listed |
| f5 big-ip webaccelerator | = 14.1.0 | No fix listed |
| f5 big-ip webaccelerator | = 15.0.0 | No fix listed |
| f5 big-ip policy enforcement manager | >= 11.5.2, <= 11.5.9 | No fix listed |
| f5 big-ip policy enforcement manager | >= 11.6.1, <= 11.6.4 | No fix listed |
| f5 big-ip policy enforcement manager | >= 12.1.0, <= 12.1.4 | No fix listed |
| f5 big-ip policy enforcement manager | >= 13.1.0, <= 13.1.1 | No fix listed |
| f5 big-ip policy enforcement manager | = 9.2.2 | No fix listed |
| f5 big-ip policy enforcement manager | = 14.0.0 | No fix listed |
| f5 big-ip policy enforcement manager | = 14.1.0 | No fix listed |
| f5 big-ip policy enforcement manager | = 15.0.0 | No fix listed |
| isc bind | >= 9.11.0, <= 9.11.7 | No fix listed |
| isc bind | >= 9.12.0, <= 9.12.3 | No fix listed |
| isc bind | >= 9.13.0, <= 9.13.7 | No fix listed |
| isc bind | >= 9.14.0, <= 9.14.2 | No fix listed |
| isc bind | >= 9.15.0, <= 9.15.5 | No fix listed |
| isc bind | = 9.11.3-s1 | No fix listed |
| isc bind | = 9.11.7-s1 | No fix listed |
| isc bind | = 9.12.4 | No fix listed |
| isc bind | = 9.12.4-p1 | No fix listed |
| f5 enterprise manager | = 3.1.1 | No fix listed |
| f5 big-iq centralized management | >= 5.1.0, <= 5.4.0 | No fix listed |
| f5 big-iq centralized management | >= 6.0.0, <= 6.1.0 | No fix listed |
| f5 iworkflow | = 2.3.0 | No fix listed |
| f5 big-ip domain name system | >= 11.5.2, <= 11.5.9 | No fix listed |
| f5 big-ip domain name system | >= 11.6.1, <= 11.6.4 | No fix listed |
| f5 big-ip domain name system | >= 12.1.0, <= 12.1.4 | No fix listed |
| f5 big-ip domain name system | >= 13.1.0, <= 13.1.1 | No fix listed |
| f5 big-ip domain name system | = 9.2.2 | No fix listed |
| f5 big-ip domain name system | = 14.0.0 | No fix listed |
| f5 big-ip domain name system | = 14.1.0 | No fix listed |
| f5 big-ip domain name system | = 15.0.0 | No fix listed |
| alpine/bind(Alpine:v3.10) | >= 9.11.0, < 9.14.3-r0 | 9.14.3-r0 |
| alpine/bind(Alpine:v3.11) | >= 9.11.0, < 9.14.4-r0 | 9.14.4-r0 |
| alpine/bind(Alpine:v3.12) | >= 9.11.0, < 9.14.4-r0 | 9.14.4-r0 |
| alpine/bind(Alpine:v3.13) | >= 9.11.0, < 9.14.4-r0 | 9.14.4-r0 |
| alpine/bind(Alpine:v3.14) | >= 9.11.0, < 9.14.4-r0 | 9.14.4-r0 |
| alpine/bind(Alpine:v3.15) | >= 9.11.0, < 9.14.4-r0 | 9.14.4-r0 |
| alpine/bind(Alpine:v3.16) | >= 9.11.0, < 9.14.4-r0 | 9.14.4-r0 |
| alpine/bind(Alpine:v3.17) | >= 9.11.0, < 9.14.4-r0 | 9.14.4-r0 |
| alpine/bind(Alpine:v3.18) | >= 9.11.0, < 9.14.4-r0 | 9.14.4-r0 |
| alpine/bind(Alpine:v3.19) | >= 9.11.0, < 9.14.4-r0 | 9.14.4-r0 |
| alpine/bind(Alpine:v3.20) | >= 9.11.0, < 9.14.4-r0 | 9.14.4-r0 |
| alpine/bind(Alpine:v3.21) | >= 9.11.0, < 9.14.4-r0 | 9.14.4-r0 |
| alpine/bind(Alpine:v3.22) | >= 9.11.0, < 9.14.4-r0 | 9.14.4-r0 |
| alpine/bind(Alpine:v3.23) | >= 9.11.0, < 9.14.4-r0 | 9.14.4-r0 |
| alpine/bind(Alpine:v3.24) | >= 9.11.0, < 9.14.4-r0 | 9.14.4-r0 |
| alpine/bind(Alpine:v3.7) | >= 9.11.0, < 9.11.8-r0 | 9.11.8-r0 |
| alpine/bind(Alpine:v3.8) | >= 9.11.0, < 9.12.4_p2-r0 | 9.12.4_p2-r0 |
| alpine/bind(Alpine:v3.9) | >= 9.11.0, < 9.12.4_p2-r0 | 9.12.4_p2-r0 |
| isc BIND 9 | = BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported P | No fix listed |
References
- Debian Security Tracker CVE-2019-6471 vendor-advisory
- kb.isc.org third-party-advisory
- support.f5.com
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking