5.9

CVE-2019-6471

A race condition when discarding malformed packets can cause BIND to exit with an assertion failure

A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F5 ≫ Big-ip Local Traffic Manager Version >= 11.5.2 <= 11.5.9
F5 ≫ Big-ip Local Traffic Manager Version >= 11.6.1 <= 11.6.4
F5 ≫ Big-ip Local Traffic Manager Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Local Traffic Manager Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Local Traffic Manager Version 14.0.0
F5 ≫ Big-ip Local Traffic Manager Version 14.1.0
F5 ≫ Big-ip Local Traffic Manager Version 15.0.0
F5 ≫ Big-ip Application Acceleration Manager Version >= 11.5.2 <= 11.5.9
F5 ≫ Big-ip Application Acceleration Manager Version >= 11.6.1 <= 11.6.4
F5 ≫ Big-ip Application Acceleration Manager Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Application Acceleration Manager Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Advanced Firewall Manager Version >= 11.5.2 <= 11.5.9
F5 ≫ Big-ip Advanced Firewall Manager Version >= 11.6.1 <= 11.6.4
F5 ≫ Big-ip Advanced Firewall Manager Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Advanced Firewall Manager Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Analytics Version >= 11.5.2 <= 11.5.9
F5 ≫ Big-ip Analytics Version >= 11.6.1 <= 11.6.4
F5 ≫ Big-ip Analytics Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Analytics Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Analytics Version 14.0.0
F5 ≫ Big-ip Analytics Version 14.1.0
F5 ≫ Big-ip Analytics Version 15.0.0
F5 ≫ Big-ip Access Policy Manager Version >= 11.5.2 <= 11.5.9
F5 ≫ Big-ip Access Policy Manager Version >= 11.6.1 <= 11.6.4
F5 ≫ Big-ip Access Policy Manager Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Access Policy Manager Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Access Policy Manager Version 14.0.0
F5 ≫ Big-ip Access Policy Manager Version 14.1.0
F5 ≫ Big-ip Access Policy Manager Version 15.0.0
F5 ≫ Big-ip Application Security Manager Version >= 11.5.2 <= 11.5.9
F5 ≫ Big-ip Application Security Manager Version >= 11.6.1 <= 11.6.4
F5 ≫ Big-ip Application Security Manager Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Application Security Manager Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Edge Gateway Version >= 11.5.2 <= 11.5.9
F5 ≫ Big-ip Edge Gateway Version >= 11.6.1 <= 11.6.4
F5 ≫ Big-ip Edge Gateway Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Edge Gateway Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Edge Gateway Version 14.0.0
F5 ≫ Big-ip Edge Gateway Version 14.1.0
F5 ≫ Big-ip Edge Gateway Version 15.0.0
F5 ≫ Big-ip Fraud Protection Service Version >= 11.5.2 <= 11.5.9
F5 ≫ Big-ip Fraud Protection Service Version >= 11.6.1 <= 11.6.4
F5 ≫ Big-ip Fraud Protection Service Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Fraud Protection Service Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Fraud Protection Service Version 14.0.0
F5 ≫ Big-ip Fraud Protection Service Version 14.1.0
F5 ≫ Big-ip Fraud Protection Service Version 15.0.0
F5 ≫ Big-ip Global Traffic Manager Version >= 11.5.2 <= 11.5.9
F5 ≫ Big-ip Global Traffic Manager Version >= 11.6.1 <= 11.6.4
F5 ≫ Big-ip Global Traffic Manager Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Global Traffic Manager Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Global Traffic Manager Version 9.2.2
F5 ≫ Big-ip Global Traffic Manager Version 14.0.0
F5 ≫ Big-ip Global Traffic Manager Version 14.1.0
F5 ≫ Big-ip Global Traffic Manager Version 15.0.0
F5 ≫ Big-ip Link Controller Version >= 11.5.2 <= 11.5.9
F5 ≫ Big-ip Link Controller Version >= 11.6.1 <= 11.6.4
F5 ≫ Big-ip Link Controller Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Link Controller Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Link Controller Version 9.2.2
F5 ≫ Big-ip Link Controller Version 14.0.0
F5 ≫ Big-ip Link Controller Version 14.1.0
F5 ≫ Big-ip Link Controller Version 15.0.0
F5 ≫ Big-ip Webaccelerator Version >= 11.5.2 <= 11.5.9
F5 ≫ Big-ip Webaccelerator Version >= 11.6.1 <= 11.6.4
F5 ≫ Big-ip Webaccelerator Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Webaccelerator Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Webaccelerator Version 9.2.2
F5 ≫ Big-ip Webaccelerator Version 14.0.0
F5 ≫ Big-ip Webaccelerator Version 14.1.0
F5 ≫ Big-ip Webaccelerator Version 15.0.0
F5 ≫ Big-ip Policy Enforcement Manager Version >= 11.5.2 <= 11.5.9
F5 ≫ Big-ip Policy Enforcement Manager Version >= 11.6.1 <= 11.6.4
F5 ≫ Big-ip Policy Enforcement Manager Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Policy Enforcement Manager Version >= 13.1.0 <= 13.1.1
Isc ≫ Bind Version >= 9.11.0 <= 9.11.7
Isc ≫ Bind Version >= 9.12.0 <= 9.12.3
Isc ≫ Bind Version >= 9.13.0 <= 9.13.7
Isc ≫ Bind Version >= 9.14.0 <= 9.14.2
Isc ≫ Bind Version >= 9.15.0 <= 9.15.5
Isc ≫ Bind Version 9.11.3 Update s1 SwEdition supported_preview
Isc ≫ Bind Version 9.11.7 Update s1 SwEdition supported_preview
Isc ≫ Bind Version 9.12.4 Update -
Isc ≫ Bind Version 9.12.4 Update p1
F5 ≫ Enterprise Manager Version 3.1.1
F5 ≫ Big-iq Centralized Management Version >= 5.1.0 <= 5.4.0
F5 ≫ Big-iq Centralized Management Version >= 6.0.0 <= 6.1.0
F5 ≫ Iworkflow Version 2.3.0
F5 ≫ Big-ip Domain Name System Version >= 11.5.2 <= 11.5.9
F5 ≫ Big-ip Domain Name System Version >= 11.6.1 <= 11.6.4
F5 ≫ Big-ip Domain Name System Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Domain Name System Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Domain Name System Version 9.2.2
F5 ≫ Big-ip Domain Name System Version 14.0.0
F5 ≫ Big-ip Domain Name System Version 14.1.0
F5 ≫ Big-ip Domain Name System Version 15.0.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.3% 0.872
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
ISC 5.9 2.2 3.6
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

CWE-617 Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

https://kb.isc.org/docs/cve-2019-6471
Third Party Advisory
https://support.f5.com/csp/article/K10092301?utm_source=f5support&amp%3Butm_medium=RSS