CVE-2019-6469

BIND Supported Preview Edition can exit with an assertion failure if ECS is in use

Medium · published October 9, 2019

CVSS v3.0
5.9
EPSS
2%
Percentile
80.2
In the wild
Unconfirmed
What it is

An error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with an assertion failure when processing a response that has malformed RRSIGs. Versions affected: BIND 9.10.5-S1 -> 9.11.6-S1 of BIND 9 Supported Preview Edition.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01962 · 80.2th percentile
Published
2019-10-09T14:17Z
EPSS history
Timeline
  • 09 OCT 14:17Z
    BIND Supported Preview Edition can exit with an assertion failure if ECS is in use
    cvelistv5