CVE-2019-6468

In BIND Supported Preview Edition, an error in the nxdomain-redirect feature can occur in versions which support EDNS Client Subnet (ECS) features. In those versions which have ECS support, enabling nxdomain-redirect is likely to lead to BIND exiting due to assertion failure. Versions affected: BIND Supported Preview Edition version 9.10.5-S1 -> 9.11.5-S5. ONLY BIND Supported Preview Edition releases are affected.

• CWE-617

• https://kb.isc.org/docs/cve-2019-6468Third Party Advisory
• https://www.synology.com/security/advisory/Synology_SA_19_20
• https://kb.isc.org/docs/cve-2019-6468Third Party Advisory
• https://www.synology.com/security/advisory/Synology_SA_19_20

Published

Oct 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6460An issue was discovered in GNU Recutils 1.8. There is a NULL…
• CVE-2019-6461An issue was discovered in cairo 1.16.0. There is an asserti…6.5
• CVE-2019-6462An issue was discovered in cairo 1.16.0. There is an infinit…6.5
• CVE-2019-6465Controls for zone transfers may not be properly applied to D…5.3
• CVE-2019-6466Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2019-6467A programming error in the nxdomain-redirect feature can cau…7.5
• CVE-2019-6469An error in the EDNS Client Subnet (ECS) feature for recursi…7.5
• CVE-2019-6470There had existed in one of the ISC BIND libraries a bug in …7.5
• CVE-2019-6471A race condition which may occur when discarding malformed p…5.9
• CVE-2019-6472A packet containing a malformed DUID can cause the Kea DHCPv…6.5
• CVE-2019-6473An invalid hostname option can trigger an assertion failure …6.5
• CVE-2019-6474A missing check on incoming client requests can be exploited…6.5