CVE-2019-6467

A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAIN redirection for recursive clients, is also serving a local copy of the root zone or using mirroring to provide the root zone, although other configurations are also possible. Versions affected: BIND 9.12.0-> 9.12.4, 9.14.0. Also affects all releases in the 9.13 development branch.

• CWE-617

• https://kb.isc.org/docs/cve-2019-6467Third Party Advisory
• https://www.synology.com/security/advisory/Synology_SA_19_20
• https://kb.isc.org/docs/cve-2019-6467Third Party Advisory
• https://www.synology.com/security/advisory/Synology_SA_19_20

Published

Oct 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6459An issue was discovered in GNU Recutils 1.8. There is a memo…
• CVE-2019-6460An issue was discovered in GNU Recutils 1.8. There is a NULL…
• CVE-2019-6461An issue was discovered in cairo 1.16.0. There is an asserti…6.5
• CVE-2019-6462An issue was discovered in cairo 1.16.0. There is an infinit…6.5
• CVE-2019-6465Controls for zone transfers may not be properly applied to D…5.3
• CVE-2019-6466Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2019-6468In BIND Supported Preview Edition, an error in the nxdomain-…7.5
• CVE-2019-6469An error in the EDNS Client Subnet (ECS) feature for recursi…7.5
• CVE-2019-6470There had existed in one of the ISC BIND libraries a bug in …7.5
• CVE-2019-6471A race condition which may occur when discarding malformed p…5.9
• CVE-2019-6472A packet containing a malformed DUID can cause the Kea DHCPv…6.5
• CVE-2019-6473An invalid hostname option can trigger an assertion failure …6.5