CVE-2019-6471

Source
https://cve.org/CVERecord?id=CVE-2019-6471
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-6471.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2019-6471
Downstream
Related
Published
2019-10-09T16:15:17.170Z
Modified
2026-04-16T00:07:35.449860231Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.

Database specific
{
    "unresolved_ranges": [
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "introduced": "11.5.2"
                },
                {
                    "last_affected": "11.5.9"
                },
                {
                    "introduced": "11.6.1"
                },
                {
                    "last_affected": "11.6.4"
                },
                {
                    "introduced": "12.1.0"
                },
                {
                    "last_affected": "12.1.4"
                },
                {
                    "introduced": "13.1.0"
                },
                {
                    "last_affected": "13.1.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_access_policy_manager:14.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_access_policy_manager:14.1.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.1.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_access_policy_manager:15.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "15.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "introduced": "11.5.2"
                },
                {
                    "last_affected": "11.5.9"
                },
                {
                    "introduced": "11.6.1"
                },
                {
                    "last_affected": "11.6.4"
                },
                {
                    "introduced": "12.1.0"
                },
                {
                    "last_affected": "12.1.4"
                },
                {
                    "introduced": "13.1.0"
                },
                {
                    "last_affected": "13.1.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:14.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:14.1.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.1.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "15.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "introduced": "11.5.2"
                },
                {
                    "last_affected": "11.5.9"
                },
                {
                    "introduced": "11.6.1"
                },
                {
                    "last_affected": "11.6.4"
                },
                {
                    "introduced": "12.1.0"
                },
                {
                    "last_affected": "12.1.4"
                },
                {
                    "introduced": "13.1.0"
                },
                {
                    "last_affected": "13.1.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_analytics:14.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_analytics:14.1.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.1.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_analytics:15.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "15.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "introduced": "11.5.2"
                },
                {
                    "last_affected": "11.5.9"
                },
                {
                    "introduced": "11.6.1"
                },
                {
                    "last_affected": "11.6.4"
                },
                {
                    "introduced": "12.1.0"
                },
                {
                    "last_affected": "12.1.4"
                },
                {
                    "introduced": "13.1.0"
                },
                {
                    "last_affected": "13.1.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:14.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:14.1.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.1.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "15.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "introduced": "11.5.2"
                },
                {
                    "last_affected": "11.5.9"
                },
                {
                    "introduced": "11.6.1"
                },
                {
                    "last_affected": "11.6.4"
                },
                {
                    "introduced": "12.1.0"
                },
                {
                    "last_affected": "12.1.4"
                },
                {
                    "introduced": "13.1.0"
                },
                {
                    "last_affected": "13.1.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_application_security_manager:14.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_application_security_manager:14.1.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.1.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_application_security_manager:15.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "15.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "introduced": "11.5.2"
                },
                {
                    "last_affected": "11.5.9"
                },
                {
                    "introduced": "11.6.1"
                },
                {
                    "last_affected": "11.6.4"
                },
                {
                    "introduced": "12.1.0"
                },
                {
                    "last_affected": "12.1.4"
                },
                {
                    "introduced": "13.1.0"
                },
                {
                    "last_affected": "13.1.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_domain_name_system:14.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_domain_name_system:14.1.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.1.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_domain_name_system:15.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "15.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "introduced": "11.5.2"
                },
                {
                    "last_affected": "11.5.9"
                },
                {
                    "introduced": "11.6.1"
                },
                {
                    "last_affected": "11.6.4"
                },
                {
                    "introduced": "12.1.0"
                },
                {
                    "last_affected": "12.1.4"
                },
                {
                    "introduced": "13.1.0"
                },
                {
                    "last_affected": "13.1.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_edge_gateway:14.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_edge_gateway:14.1.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.1.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_edge_gateway:15.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "15.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "introduced": "11.5.2"
                },
                {
                    "last_affected": "11.5.9"
                },
                {
                    "introduced": "11.6.1"
                },
                {
                    "last_affected": "11.6.4"
                },
                {
                    "introduced": "12.1.0"
                },
                {
                    "last_affected": "12.1.4"
                },
                {
                    "introduced": "13.1.0"
                },
                {
                    "last_affected": "13.1.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_fraud_protection_service:14.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_fraud_protection_service:14.1.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.1.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_fraud_protection_service:15.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "15.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "introduced": "11.5.2"
                },
                {
                    "last_affected": "11.5.9"
                },
                {
                    "introduced": "11.6.1"
                },
                {
                    "last_affected": "11.6.4"
                },
                {
                    "introduced": "12.1.0"
                },
                {
                    "last_affected": "12.1.4"
                },
                {
                    "introduced": "13.1.0"
                },
                {
                    "last_affected": "13.1.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_global_traffic_manager:14.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_global_traffic_manager:14.1.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.1.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_global_traffic_manager:15.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "15.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "introduced": "11.5.2"
                },
                {
                    "last_affected": "11.5.9"
                },
                {
                    "introduced": "11.6.1"
                },
                {
                    "last_affected": "11.6.4"
                },
                {
                    "introduced": "12.1.0"
                },
                {
                    "last_affected": "12.1.4"
                },
                {
                    "introduced": "13.1.0"
                },
                {
                    "last_affected": "13.1.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_link_controller:14.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_link_controller:14.1.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.1.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_link_controller:15.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "15.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "introduced": "11.5.2"
                },
                {
                    "last_affected": "11.5.9"
                },
                {
                    "introduced": "11.6.1"
                },
                {
                    "last_affected": "11.6.4"
                },
                {
                    "introduced": "12.1.0"
                },
                {
                    "last_affected": "12.1.4"
                },
                {
                    "introduced": "13.1.0"
                },
                {
                    "last_affected": "13.1.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_local_traffic_manager:14.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_local_traffic_manager:14.1.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.1.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_local_traffic_manager:15.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "15.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "introduced": "11.5.2"
                },
                {
                    "last_affected": "11.5.9"
                },
                {
                    "introduced": "11.6.1"
                },
                {
                    "last_affected": "11.6.4"
                },
                {
                    "introduced": "12.1.0"
                },
                {
                    "last_affected": "12.1.4"
                },
                {
                    "introduced": "13.1.0"
                },
                {
                    "last_affected": "13.1.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:14.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:14.1.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.1.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "15.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "introduced": "11.5.2"
                },
                {
                    "last_affected": "11.5.9"
                },
                {
                    "introduced": "11.6.1"
                },
                {
                    "last_affected": "11.6.4"
                },
                {
                    "introduced": "12.1.0"
                },
                {
                    "last_affected": "12.1.4"
                },
                {
                    "introduced": "13.1.0"
                },
                {
                    "last_affected": "13.1.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_webaccelerator:14.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_webaccelerator:14.1.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "14.1.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-ip_webaccelerator:15.0.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "15.0.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "introduced": "5.1.0"
                },
                {
                    "last_affected": "5.4.0"
                },
                {
                    "introduced": "6.0.0"
                },
                {
                    "last_affected": "6.1.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "3.1.1"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:f5:iworkflow:2.3.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "2.3.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpe": "cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.11.7-s1"
                }
            ]
        }
    ]
}
References

Affected packages

Git / gitlab.isc.org/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events
Database specific
{
    "source": "CPE_FIELD",
    "cpe": [
        "cpe:2.3:a:f5:big-ip_global_traffic_manager:9.2.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:f5:big-ip_link_controller:9.2.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:f5:big-ip_webaccelerator:9.2.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:9.2.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*",
        "cpe:2.3:a:isc:bind:9.12.4:-:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.12.4:p1:*:*:*:*:*:*",
        "cpe:2.3:a:f5:big-ip_domain_name_system:9.2.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.2.2"
        },
        {
            "last_affected": "9.11.3-s1"
        },
        {
            "last_affected": "9.12.4-NA"
        },
        {
            "last_affected": "9.12.4-p1"
        },
        {
            "introduced": "9.11.0"
        },
        {
            "last_affected": "9.11.7"
        },
        {
            "introduced": "9.12.0"
        },
        {
            "last_affected": "9.12.3"
        },
        {
            "introduced": "9.13.0"
        },
        {
            "last_affected": "9.13.7"
        },
        {
            "introduced": "9.14.0"
        },
        {
            "last_affected": "9.14.2"
        },
        {
            "introduced": "9.15.0"
        },
        {
            "last_affected": "9.15.5"
        }
    ]
}

Affected versions

v9.*
v9.10.0a1
v9.10.0a2
v9.10.0b1
v9.10.0b2
v9.10.0rc1
v9.11.0
v9.11.0a1
v9.11.0a2
v9.11.0a3
v9.11.1
v9.11.1b1
v9.11.1rc1
v9.11.1rc2
v9.11.1rc3
v9.11.2b1
v9.11.2rc1
v9.11.3b1
v9.11.3rc1
v9.11.4
v9.11.4rc2
v9.11.6
v9.11.6rc1
v9.11.7
v9.12.0a1
v9.12.0b1
v9.12.0b2
v9.12.0rc1
v9.12.1b1
v9.12.1rc1
v9.12.2
v9.12.2rc2
v9.12.3
v9.12.3rc1
v9.12.4
v9.12.4-P1
v9.12.4rc1
v9.13.0
v9.13.2
v9.13.3
v9.13.4
v9.13.5
v9.13.6
v9.13.7
v9.14.0rc1
v9.14.2
v9.15.0
v9.15.2
v9.15.3
v9.15.4
v9.15.5
v9.2.2
v9.5.0a1
v9.5.0a2
v9.5.0a3
v9.5.0a4
v9.5.0a5
v9.5.0a6
v9.7.0a1

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-6471.json"