CVE-2019-6465

Name
CVE-2019-6465
Description
Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2019-6465.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Third Party Advisory https://kb.isc.org/docs/cve-2019-6465
Third Party Advisory https://access.redhat.com/errata/RHSA-2019:3552

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* bind >= 9.9.0 <= 9.10.7
cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:* bind == None == 9.9.3
cpe:2.3:a:isc:bind:9.10.8:-:*:*:*:*:*:* bind == None == 9.10.8
cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* bind >= 9.11.0 <= 9.11.4
cpe:2.3:a:isc:bind:9.11.5:-:*:*:*:*:*:* bind == None == 9.11.5
cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* bind >= 9.12.0 <= 9.12.2
cpe:2.3:a:isc:bind:9.12.3:-:*:*:*:*:*:* bind == None == 9.12.3
cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* bind >= 9.13.0 <= 9.13.6

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
bind edge-main 9.12.3_p4-r0 None fixed
bind edge-main 9.12.1_p2-r0 None possibly vulnerable
bind edge-main 9.11.2_p1-r0 None possibly vulnerable
bind edge-main 9.11.0_p5-r0 None possibly vulnerable
bind edge-main 9.10.4_p5-r0 None possibly vulnerable
bind 3.22-main 9.12.3_p4-r0 None fixed
bind 3.22-main 9.12.1_p2-r0 None possibly vulnerable
bind 3.22-main 9.11.2_p1-r0 None possibly vulnerable
bind 3.22-main 9.11.0_p5-r0 None possibly vulnerable
bind 3.22-main 9.10.4_p5-r0 None possibly vulnerable
bind 3.21-main 9.12.3_p4-r0 None fixed
bind 3.21-main 9.12.1_p2-r0 None possibly vulnerable
bind 3.21-main 9.11.2_p1-r0 None possibly vulnerable
bind 3.21-main 9.11.0_p5-r0 None possibly vulnerable
bind 3.21-main 9.10.4_p5-r0 None possibly vulnerable
bind 3.20-main 9.12.3_p4-r0 None fixed
bind 3.20-main 9.12.1_p2-r0 None possibly vulnerable
bind 3.20-main 9.11.2_p1-r0 None possibly vulnerable
bind 3.20-main 9.11.0_p5-r0 None possibly vulnerable
bind 3.20-main 9.10.4_p5-r0 None possibly vulnerable
bind 3.19-main 9.12.3_p4-r0 None fixed
bind 3.19-main 9.12.1_p2-r0 None possibly vulnerable
bind 3.19-main 9.11.2_p1-r0 None possibly vulnerable
bind 3.19-main 9.11.0_p5-r0 None possibly vulnerable
bind 3.19-main 9.10.4_p5-r0 None possibly vulnerable
bind 3.18-main 9.12.3_p4-r0 None fixed
bind 3.17-main 9.12.3_p4-r0 None fixed
bind 3.12-main 9.12.3_p4-r0 None fixed
bind 3.11-main 9.12.3_p4-r0 None fixed
bind 3.10-main 9.12.3_p4-r0 None fixed