PT-2019-5506 · Isc+1 · Bind+1

Published 2019-04-24 · Updated 2019-12-18 · CVE-2019-6468

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions BIND Supported Preview Edition versions 9.10.5-S1 through 9.11.5-S5

Description The issue is related to the nxdomain-redirect feature in the BIND DNS server, specifically when EDNS Client Subnet (ECS) features are supported. It can lead to an assertion failure, causing the service to exit. This can be exploited by a remote attacker to cause a denial of service.

Recommendations For BIND Supported Preview Edition versions 9.10.5-S1 through 9.11.5-S5, consider disabling the nxdomain-redirect feature to prevent the assertion failure until a patch is available. Restrict access to the ECS support feature in the affected versions to minimize the risk of exploitation.

Fix

DoS

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

BDU:2020-03323

CVE-2019-6468

Affected Products

Bind

Bind Server

References · 11

• https://bdu.fstec.ru/vul/2020-03323 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-6468 · Security Note
• https://cve.org/CVERecord?id=CVE-2019-6468 · Security Note
• https://ubuntu.com/security/CVE-2019-6468 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-6468 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-6468 · Vendor Advisory
• https://access.redhat.com/security/cve/cve-2019-6468 · Note
• https://synology.com/security/advisory/Synology_SA_19_20 · Note
• https://kb.isc.org/docs/cve-2019-6468 · Note
• https://synology.com/ru-ru/security/advisory/Synology_SA_19_20 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1702642 · Note