CVE-2019-6467 REJECTED

A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAIN redirection for recursive clients, is also serving a local copy of the root zone or using mirroring to provide the root zone, although other configurations are also possible. Versions affected: BIND 9.12.0-> 9.12.4, 9.14.0. Also affects all releases in the 9.13 development branch.

EPSS 17.22% · 95.0th percentile

Risk Scores

EPSS Score
17.22%
95.0th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSbind91:9.11.3+dfsg-1ubuntu1.3, 1:9.11.3+dfsg-1ubuntu1.2, 1:9.11.3+dfsg-1ubuntu1.1
Ubuntu:14.04:LTSbind91:9.9.5.dfsg-3ubuntu0.5, 1:9.9.5.dfsg-3ubuntu0.6, 1:9.9.5.dfsg-3ubuntu0.7
Ubuntu:16.04:LTSbind91:9.10.3.dfsg.P4-8, 1:9.10.3.dfsg.P4-8ubuntu1, 1:9.10.3.dfsg.P4-8ubuntu1.1

Timeline

References

Open in Interactive Console →