CVE-2019-6465

Published: Oct 9, 2019Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2019-6465.

Affected (15)

Products: Isc: Bind · Redhat: Enterprise Linux

1 product

1 product

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	9.11.0 ≤ version ≤ 9.11.4
Isc Bind	9.12.0 ≤ version ≤ 9.12.2
Isc Bind	9.13.0 ≤ version ≤ 9.13.6
Isc Bind	9.9.0 ≤ version ≤ 9.10.7
Isc Bind	Version 9.10.8
Isc Bind	Version 9.10.8 p1
Isc Bind	Version 9.11.5
Isc Bind	Version 9.11.5 p1
Isc Bind	Version 9.11.5 p2
Isc Bind	Version 9.11.5 s3
Isc Bind	Version 9.12.3
Isc Bind	Version 9.12.3 p1
Isc Bind	Version 9.12.3 p2
Isc Bind	Version 9.9.3 s1