Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2019-6465

Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2019-6465.

  • Published: Oct 9, 2019
  • Updated: Apr 13, 2023
  • CVE: CVE-2019-6465
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
isc / bind 9.9.3-s1 9.9.3-s1.x
isc / bind 9.10.8-p1 9.10.8-p1.x
isc / bind 9.10.8 9.10.8.x
isc / bind 9.11.5-p1 9.11.5-p1.x
isc / bind 9.11.5 9.11.5.x
isc / bind 9.12.3-p1 9.12.3-p1.x
isc / bind 9.12.3 9.12.3.x
isc / bind 9.13.0 9.13.6.x
isc / bind 9.12.3-p2 9.12.3-p2.x
isc / bind 9.12.0 9.12.2.x
isc / bind 9.11.5-p2 9.11.5-p2.x
isc / bind 9.11.0 9.11.4.x
isc / bind 9.11.5-s3 9.11.5-s3.x
isc / bind 9.9.0 9.10.7.x
redhat / enterprise_linux 8.0 8.0.x