CVE-2019-6469
Last modified
CVE-2019-6469 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. An error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with an assertion failure when processing a response that has malformed RRSIGs. Versions affected: BIND 9.10.5-S1 -> 9.11.6-S1 of BIND 9 Supported Preview Edition.. EPSS estimates a 1.95% chance of exploitation in the next 30 days.
Description
An error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with an assertion failure when processing a response that has malformed RRSIGs. Versions affected: BIND 9.10.5-S1 -> 9.11.6-S1 of BIND 9 Supported Preview Edition.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Isc | Bind | 9.10.5 | S1 |
| Isc | Bind | 9.11.6 | S1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-6469?
How severe is CVE-2019-6469?
How do I fix CVE-2019-6469?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-6461An issue was discovered in cairo 1.16.0. There is an asserti…6.5
- CVE-2019-6462An issue was discovered in cairo 1.16.0. There is an infinit…6.5
- CVE-2019-6465Controls for zone transfers may not be properly applied to D…5.3
- CVE-2019-6466Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
- CVE-2019-6467A programming error in the nxdomain-redirect feature can cau…7.5
- CVE-2019-6468In BIND Supported Preview Edition, an error in the nxdomain-…7.5
- CVE-2019-6470There had existed in one of the ISC BIND libraries a bug in …7.5
- CVE-2019-6471A race condition which may occur when discarding malformed p…5.9
- CVE-2019-6472A packet containing a malformed DUID can cause the Kea DHCPv…6.5
- CVE-2019-6473An invalid hostname option can trigger an assertion failure …6.5
- CVE-2019-6474A missing check on incoming client requests can be exploited…6.5
- CVE-2019-6475Mirror zones are a BIND feature allowing recursive servers t…7.5
Are you affected by CVE-2019-6469?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST