Vulnerability Description
A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| F5 | Big-Ip Local Traffic Manager | >= 11.5.2, <= 11.5.9 |
| F5 | Big-Ip Application Acceleration Manager | >= 11.5.2, <= 11.5.9 |
| F5 | Big-Ip Advanced Firewall Manager | >= 11.5.2, <= 11.5.9 |
| F5 | Big-Ip Analytics | >= 11.5.2, <= 11.5.9 |
| F5 | Big-Ip Access Policy Manager | >= 11.5.2, <= 11.5.9 |
| F5 | Big-Ip Application Security Manager | >= 11.5.2, <= 11.5.9 |
| F5 | Big-Ip Edge Gateway | >= 11.5.2, <= 11.5.9 |
| F5 | Big-Ip Fraud Protection Service | >= 11.5.2, <= 11.5.9 |
| F5 | Big-Ip Global Traffic Manager | >= 11.5.2, <= 11.5.9 |
| F5 | Big-Ip Link Controller | >= 11.5.2, <= 11.5.9 |
| F5 | Big-Ip Webaccelerator | >= 11.5.2, <= 11.5.9 |
| F5 | Big-Ip Policy Enforcement Manager | >= 11.5.2, <= 11.5.9 |
| Isc | Bind | >= 9.11.0, <= 9.11.7 |
| F5 | Enterprise Manager | 3.1.1 |
| F5 | Big-Iq Centralized Management | >= 5.1.0, <= 5.4.0 |
| F5 | Iworkflow | 2.3.0 |
| F5 | Big-Ip Domain Name System | >= 11.5.2, <= 11.5.9 |
Related Weaknesses (CWE)
References
- https://kb.isc.org/docs/cve-2019-6471Third Party Advisory
- https://support.f5.com/csp/article/K10092301?utm_source=f5support&%3Butm_medi
- https://kb.isc.org/docs/cve-2019-6471Third Party Advisory
- https://support.f5.com/csp/article/K10092301?utm_source=f5support&%3Butm_medi
FAQ
What is CVE-2019-6471?
CVE-2019-6471 is a vulnerability with a CVSS score of 5.9 (MEDIUM). A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12...
How severe is CVE-2019-6471?
CVE-2019-6471 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-6471?
Check the references section above for vendor advisories and patch information. Affected products include: F5 Big-Ip Local Traffic Manager, F5 Big-Ip Application Acceleration Manager, F5 Big-Ip Advanced Firewall Manager, F5 Big-Ip Analytics, F5 Big-Ip Access Policy Manager.