VulnerabilityModified
CVE-2019-6471
A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c.
MEDIUM 5.9EPSS 3.30%
Does this matter?
Lower severity and a low EPSS score (3.30%). Track it; it rarely justifies an emergency change on its own.
Description
A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.
- CVSS 3.1
- 5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 3.30% probability · 88th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-362, CWE-617
- Affected
- f5/big-ip local traffic manager · f5/big-ip application acceleration manager · f5/big-ip advanced firewall manager · f5/big-ip analytics · f5/big-ip access policy manager · f5/big-ip application security manager · f5/big-ip edge gateway · f5/big-ip fraud protection service · f5/big-ip global traffic manager · f5/big-ip link controller · f5/big-ip webaccelerator · f5/big-ip policy enforcement manager · isc/bind · f5/enterprise manager · f5/big-iq centralized management · f5/iworkflow · f5/big-ip domain name system
- Source
- security-officer@isc.org
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.