CVE-2019-6468

Published: Oct 9, 2019Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In BIND Supported Preview Edition, an error in the nxdomain-redirect feature can occur in versions which support EDNS Client Subnet (ECS) features. In those versions which have ECS support, enabling nxdomain-redirect is likely to lead to BIND exiting due to assertion failure. Versions affected: BIND Supported Preview Edition version 9.10.5-S1 -> 9.11.5-S5. ONLY BIND Supported Preview Edition releases are affected.

Affected (2)

Products: Isc: Bind

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Version 9.10.5 s1
Isc Bind	Version 9.11.5 s5

Related CWEs

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (4)

https://kb.isc.org/docs/cve-2019-6468

Source: security-officer@isc.org

Third Party Advisory

https://www.synology.com/security/advisory/Synology_SA_19_20

Source: security-officer@isc.org

https://kb.isc.org/docs/cve-2019-6468

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.synology.com/security/advisory/Synology_SA_19_20

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.