PT-2019-5506 · Isc+1 · Bind+1

Publicado 2019-04-24 · Atualizado 2019-12-18 · CVE-2019-6468

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions BIND Supported Preview Edition versions 9.10.5-S1 through 9.11.5-S5

Description The issue is related to the nxdomain-redirect feature in the BIND DNS server, specifically when EDNS Client Subnet (ECS) features are supported. It can lead to an assertion failure, causing the service to exit. This can be exploited by a remote attacker to cause a denial of service.

Recommendations For BIND Supported Preview Edition versions 9.10.5-S1 through 9.11.5-S5, consider disabling the nxdomain-redirect feature to prevent the assertion failure until a patch is available. Restrict access to the ECS support feature in the affected versions to minimize the risk of exploitation.

Correção

DoS

Assertion Failure

Enumeração de Fraquezas

CWE-617

Identificadores relacionados

BDU:2020-03323

CVE-2019-6468

Produtos afetados

Bind

Bind Server

Referências · 11

• https://bdu.fstec.ru/vul/2020-03323 · Nota de Segurança
• https://access.redhat.com/security/cve/cve-2019-6468 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-6468 · Nota de Segurança
• https://synology.com/security/advisory/Synology_SA_19_20 · Nota
• https://cve.org/CVERecord?id=CVE-2019-6468 · Nota de Segurança
• https://kb.isc.org/docs/cve-2019-6468 · Nota
• https://synology.com/ru-ru/security/advisory/Synology_SA_19_20 · Nota
• https://ubuntu.com/security/CVE-2019-6468 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-6468 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1702642 · Nota
• https://osv.dev/vulnerability/CVE-2019-6468 · Aviso do Fabricante