CVE-2019-6467

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-6467
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-6467.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-6467
Downstream
Related
Published
2019-10-09T16:15:16.593Z
Modified
2026-04-10T04:19:46.062768Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAIN redirection for recursive clients, is also serving a local copy of the root zone or using mirroring to provide the root zone, although other configurations are also possible. Versions affected: BIND 9.12.0-> 9.12.4, 9.14.0. Also affects all releases in the 9.13 development branch.

References

Affected packages

Git / gitlab.isc.org/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events
Introduced
71a40862c0be867999867cd99e21c2266a5e452b
Last affected
a953e08740c2d76cd69e3e9515e14544fa3a1dda
Introduced
29b3a7d84240a51099490c0f39ae537f4e0d6a7a
Last affected
6491691ac4bec0dc59e3eeba2797d65527f3bcd6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d1e053ed8dff25af8af241cf5ee2c83bd41a25ad
Database specific 
{
    "versions": [
        {
            "introduced": "9.12.0"
        },
        {
            "last_affected": "9.12.4"
        },
        {
            "introduced": "9.13.0"
        },
        {
            "last_affected": "9.13.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.14.0"
        }
    ]
}

Affected versions

v9.*
v9.10.0a1
v9.10.0a2
v9.10.0b1
v9.10.0b2
v9.10.0rc1
v9.11.0a1
v9.11.0a2
v9.11.0a3
v9.12.0a1
v9.12.0b1
v9.12.0b2
v9.12.0rc1
v9.12.1b1
v9.12.1rc1
v9.12.2
v9.12.2rc2
v9.12.4
v9.12.4rc1
v9.13.0
v9.13.2
v9.13.3
v9.13.4
v9.13.5
v9.13.6
v9.13.7
v9.14.0
v9.14.0rc1
v9.14.0rc2
v9.14.0rc3
v9.5.0a1
v9.5.0a2
v9.5.0a3
v9.5.0a4
v9.5.0a5
v9.5.0a6
v9.7.0a1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-6467.json"