Test ID:	1.3.6.1.4.1.25623.1.0.142322
Category:	Denial of Service
Title:	ISC BIND DoS Vulnerability (CVE-2019-6467) - Linux
Summary:	ISC BIND is prone to a denial of service vulnerability.
Description:	Summary: ISC BIND is prone to a denial of service vulnerability. Vulnerability Insight: A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAIN redirection for recursive clients, is also serving a local copy of the root zone or using mirroring to provide the root zone, although other configurations are also possible. Vulnerability Impact: An attacker who can deliberately trigger the condition on a server with a vulnerable configuration can cause BIND to exit, denying service to other clients. Affected Software/OS: BIND 9.12.0 to 9.12.4 and 9.14.0. Also affects all releases in the 9.13 development branch. Solution: Update to version 9.12.4-P1, 9.14.1 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-6467
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.