CVE-2019-6467
Fixed in a distro release EPSS 5%CVSS 5.9
A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAIN redirection for recursive clients, is also serving a local copy of the root zone or using mirroring to provide the root zone, although other configurations are also possible. Versions affected: BIND 9.12.0-> 9.12.4, 9.14.0. Also affects all releases in the 9.13 development branch.
Products: ISC BIND 9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | bind | 9.14.1-r0 |
| Alpine 3.11 | bind | 9.14.1-r0 |
| Alpine 3.12 | bind | 9.14.1-r0 |
| Alpine 3.13 | bind | 9.14.1-r0 |
| Alpine 3.14 | bind | 9.14.1-r0 |
| Alpine 3.15 | bind | 9.14.1-r0 |
| Alpine 3.16 | bind | 9.14.1-r0 |
| Alpine 3.17 | bind | 9.14.1-r0 |
| Alpine 3.18 | bind | 9.14.1-r0 |
| Alpine 3.19 | bind | 9.14.1-r0 |
| Alpine 3.20 | bind | 9.14.1-r0 |
| Alpine 3.21 | bind | 9.14.1-r0 |
| Alpine 3.22 | bind | 9.14.1-r0 |
| Alpine 3.23 | bind | 9.14.1-r0 |
| Alpine 3.24 | bind | 9.14.1-r0 |
| Alpine 3.6 | bind | 9.11.6_p1-r0 |
| Alpine 3.7 | bind | 9.11.6_p1-r0 |
| Alpine 3.8 | bind | 9.12.4_p1-r0 |
| Alpine 3.9 | bind | 9.12.4_p1-r0 |
| Chainguard | bind | 0 |
| Chainguard | bind-dev | 0 |
| Chainguard | bind-dnssec-root | 0 |
| Chainguard | bind-dnssec-tools | 0 |
| Chainguard | bind-doc | 0 |
| Chainguard | bind-libs | 0 |
| Chainguard | bind-plugins | 0 |
| Chainguard | bind-tools | 0 |
| Ubuntu 14.04 LTS | bind9 | 1:9.9.5.dfsg-3ubuntu0.19 |
| Ubuntu 16.04 LTS | bind9 | 1:9.10.3.dfsg.P4-8ubuntu1.12 |
| Ubuntu 18.04 LTS | bind9 | 1:9.11.3+dfsg-1ubuntu1.5 |
| Wolfi | bind | 0 |
| Wolfi | bind-dev | 0 |
| Wolfi | bind-dnssec-root | 0 |
| Wolfi | bind-dnssec-tools | 0 |
| Wolfi | bind-doc | 0 |
| Wolfi | bind-libs | 0 |
| Wolfi | bind-plugins | 0 |
| Wolfi | bind-tools | 0 |