{"schema_version":"1.8.0","id":"CVE-2019-6471","published":"2019-10-09T16:15:17.170Z","modified":"2026-08-07T11:48:21.694560946Z","related":["CGA-fxmp-mccx-5332","SUSE-SU-2019:2502-1","SUSE-SU-2019:2550-1","openSUSE-SU-2019:2263-1","openSUSE-SU-2019:2265-1","openSUSE-SU-2024:10650-1"],"details":"A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/isc-projects/bind9","events":[{"introduced":"1477c19dd9a347ee19a42dac227f299a4680506f"},{"last_affected":"b8170affaeec0efbbe47d9af220b3347986d5f9f"},{"introduced":"71a40862c0be867999867cd99e21c2266a5e452b"},{"last_affected":"6c8e92c06d2d5b5904c925ca48564a93f1edba44"},{"introduced":"29b3a7d84240a51099490c0f39ae537f4e0d6a7a"},{"last_affected":"6491691ac4bec0dc59e3eeba2797d65527f3bcd6"},{"introduced":"d1e053ed8dff25af8af241cf5ee2c83bd41a25ad"},{"last_affected":"354cf1f66f6f527a8f71f752d9d0bafe55c2155d"},{"introduced":"031bca512d4788356de4cce6f3e61e6b1a878f9c"},{"last_affected":"87676a6ac0dac1fed90b5df9f1289ebb17a41f30"},{"introduced":"617639b7cc40ba9eb6fde2d98099726d50da812e"},{"last_affected":"28e45cd00e2e1e621a2e97ba1ee6bdc6a4102e16"}],"database_specific":{"cpe":["cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*","cpe:2.3:a:isc:bind:9.12.4:-:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.12.4:p1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.11.0"},{"last_affected":"9.11.7"},{"introduced":"9.12.0"},{"last_affected":"9.12.3"},{"introduced":"9.13.0"},{"last_affected":"9.13.7"},{"introduced":"9.14.0"},{"last_affected":"9.14.2"},{"introduced":"9.15.0"},{"last_affected":"9.15.5"},{"introduced":"9.11.3-s1"},{"last_affected":"9.11.3-s1"},{"introduced":"9.12.4-NA"},{"last_affected":"9.12.4-NA"},{"introduced":"9.12.4-p1"},{"last_affected":"9.12.4-p1"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["9.11.3-s1","9.12.4-NA","9.12.4-p1","v9.15.5","v9.15.4","v9.15.3","v9.15.2","v9.11.7","v9.14.2","v9.15.0","v9.11.6","v9.14.0rc1","v9.11.6rc1","v9.13.7","v9.13.6","v9.13.5","v9.13.4","v9.13.3","v9.11.4","v9.13.2","v9.11.4rc2","v9.13.0","v9.11.3rc1","v9.11.3b1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-6471.json"}},{"ranges":[{"type":"GIT","repo":"https://gitlab.isc.org/isc-projects/bind9","events":[{"introduced":"1477c19dd9a347ee19a42dac227f299a4680506f"},{"last_affected":"b8170affaeec0efbbe47d9af220b3347986d5f9f"},{"introduced":"71a40862c0be867999867cd99e21c2266a5e452b"},{"last_affected":"6c8e92c06d2d5b5904c925ca48564a93f1edba44"},{"introduced":"29b3a7d84240a51099490c0f39ae537f4e0d6a7a"},{"last_affected":"6491691ac4bec0dc59e3eeba2797d65527f3bcd6"},{"introduced":"d1e053ed8dff25af8af241cf5ee2c83bd41a25ad"},{"last_affected":"354cf1f66f6f527a8f71f752d9d0bafe55c2155d"},{"introduced":"031bca512d4788356de4cce6f3e61e6b1a878f9c"},{"last_affected":"87676a6ac0dac1fed90b5df9f1289ebb17a41f30"},{"introduced":"617639b7cc40ba9eb6fde2d98099726d50da812e"},{"last_affected":"28e45cd00e2e1e621a2e97ba1ee6bdc6a4102e16"}],"database_specific":{"cpe":["cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*","cpe:2.3:a:isc:bind:9.12.4:-:*:*:*:*:*:*","cpe:2.3:a:isc:bind:9.12.4:p1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.11.0"},{"last_affected":"9.11.7"},{"introduced":"9.12.0"},{"last_affected":"9.12.3"},{"introduced":"9.13.0"},{"last_affected":"9.13.7"},{"introduced":"9.14.0"},{"last_affected":"9.14.2"},{"introduced":"9.15.0"},{"last_affected":"9.15.5"},{"introduced":"9.11.3-s1"},{"last_affected":"9.11.3-s1"},{"introduced":"9.12.4-NA"},{"last_affected":"9.12.4-NA"},{"introduced":"9.12.4-p1"},{"last_affected":"9.12.4-p1"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["9.11.3-s1","9.12.4-NA","9.12.4-p1","v9.15.5","v9.15.4","v9.15.3","v9.15.2","v9.11.7","v9.14.2","v9.15.0","v9.11.6","v9.14.0rc1","v9.11.6rc1","v9.13.7","v9.13.6","v9.13.5","v9.13.4","v9.13.3","v9.11.4","v9.13.2","v9.11.4rc2","v9.13.0","v9.11.3rc1","v9.11.3b1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-6471.json"}}],"references":[{"type":"WEB","url":"https://support.f5.com/csp/article/K10092301?utm_source=f5support&amp%3Butm_medium=RSS"},{"type":"ADVISORY","url":"https://kb.isc.org/docs/cve-2019-6471"}],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.5.2"},{"last_affected":"11.5.9"},{"introduced":"11.6.1"},{"last_affected":"11.6.4"},{"introduced":"12.1.0"},{"last_affected":"12.1.4"},{"introduced":"13.1.0"},{"last_affected":"13.1.1"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_access_policy_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.5.2"},{"last_affected":"11.5.9"},{"introduced":"11.6.1"},{"last_affected":"11.6.4"},{"introduced":"12.1.0"},{"last_affected":"12.1.4"},{"introduced":"13.1.0"},{"last_affected":"13.1.1"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_advanced_firewall_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.5.2"},{"last_affected":"11.5.9"},{"introduced":"11.6.1"},{"last_affected":"11.6.4"},{"introduced":"12.1.0"},{"last_affected":"12.1.4"},{"introduced":"13.1.0"},{"last_affected":"13.1.1"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_analytics"},{"cpes":["cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.5.2"},{"last_affected":"11.5.9"},{"introduced":"11.6.1"},{"last_affected":"11.6.4"},{"introduced":"12.1.0"},{"last_affected":"12.1.4"},{"introduced":"13.1.0"},{"last_affected":"13.1.1"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_application_acceleration_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.5.2"},{"last_affected":"11.5.9"},{"introduced":"11.6.1"},{"last_affected":"11.6.4"},{"introduced":"12.1.0"},{"last_affected":"12.1.4"},{"introduced":"13.1.0"},{"last_affected":"13.1.1"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_application_security_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.5.2"},{"last_affected":"11.5.9"},{"introduced":"11.6.1"},{"last_affected":"11.6.4"},{"introduced":"12.1.0"},{"last_affected":"12.1.4"},{"introduced":"13.1.0"},{"last_affected":"13.1.1"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_domain_name_system"},{"cpes":["cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.5.2"},{"last_affected":"11.5.9"},{"introduced":"11.6.1"},{"last_affected":"11.6.4"},{"introduced":"12.1.0"},{"last_affected":"12.1.4"},{"introduced":"13.1.0"},{"last_affected":"13.1.1"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_edge_gateway"},{"cpes":["cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.5.2"},{"last_affected":"11.5.9"},{"introduced":"11.6.1"},{"last_affected":"11.6.4"},{"introduced":"12.1.0"},{"last_affected":"12.1.4"},{"introduced":"13.1.0"},{"last_affected":"13.1.1"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_fraud_protection_service"},{"cpes":["cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.5.2"},{"last_affected":"11.5.9"},{"introduced":"11.6.1"},{"last_affected":"11.6.4"},{"introduced":"12.1.0"},{"last_affected":"12.1.4"},{"introduced":"13.1.0"},{"last_affected":"13.1.1"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_global_traffic_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.5.2"},{"last_affected":"11.5.9"},{"introduced":"11.6.1"},{"last_affected":"11.6.4"},{"introduced":"12.1.0"},{"last_affected":"12.1.4"},{"introduced":"13.1.0"},{"last_affected":"13.1.1"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_link_controller"},{"cpes":["cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.5.2"},{"last_affected":"11.5.9"},{"introduced":"11.6.1"},{"last_affected":"11.6.4"},{"introduced":"12.1.0"},{"last_affected":"12.1.4"},{"introduced":"13.1.0"},{"last_affected":"13.1.1"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_local_traffic_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.5.2"},{"last_affected":"11.5.9"},{"introduced":"11.6.1"},{"last_affected":"11.6.4"},{"introduced":"12.1.0"},{"last_affected":"12.1.4"},{"introduced":"13.1.0"},{"last_affected":"13.1.1"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_policy_enforcement_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.5.2"},{"last_affected":"11.5.9"},{"introduced":"11.6.1"},{"last_affected":"11.6.4"},{"introduced":"12.1.0"},{"last_affected":"12.1.4"},{"introduced":"13.1.0"},{"last_affected":"13.1.1"}],"source":"CPE_RANGE","vendor_product":"f5:big-ip_webaccelerator"},{"cpes":["cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.1.0"},{"last_affected":"5.4.0"},{"introduced":"6.0.0"},{"last_affected":"6.1.0"}],"source":"CPE_RANGE","vendor_product":"f5:big-iq_centralized_management"},{"cpes":["cpe:2.3:a:f5:big-ip_access_policy_manager:14.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:14.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:15.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"14.0.0"},{"last_affected":"14.0.0"},{"introduced":"14.1.0"},{"last_affected":"14.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.0.0"}],"source":"CPE_STRING","vendor_product":"f5:big-ip_access_policy_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_advanced_firewall_manager:14.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:14.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"14.0.0"},{"last_affected":"14.0.0"},{"introduced":"14.1.0"},{"last_affected":"14.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.0.0"}],"source":"CPE_STRING","vendor_product":"f5:big-ip_advanced_firewall_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_analytics:14.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_analytics:14.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_analytics:15.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"14.0.0"},{"last_affected":"14.0.0"},{"introduced":"14.1.0"},{"last_affected":"14.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.0.0"}],"source":"CPE_STRING","vendor_product":"f5:big-ip_analytics"},{"cpes":["cpe:2.3:a:f5:big-ip_application_acceleration_manager:14.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:14.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"14.0.0"},{"last_affected":"14.0.0"},{"introduced":"14.1.0"},{"last_affected":"14.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.0.0"}],"source":"CPE_STRING","vendor_product":"f5:big-ip_application_acceleration_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_application_security_manager:14.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:14.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:15.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"14.0.0"},{"last_affected":"14.0.0"},{"introduced":"14.1.0"},{"last_affected":"14.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.0.0"}],"source":"CPE_STRING","vendor_product":"f5:big-ip_application_security_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_domain_name_system:14.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_domain_name_system:14.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_domain_name_system:15.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_domain_name_system:9.2.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.2.2"},{"last_affected":"9.2.2"},{"introduced":"14.0.0"},{"last_affected":"14.0.0"},{"introduced":"14.1.0"},{"last_affected":"14.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.0.0"}],"source":"CPE_STRING","vendor_product":"f5:big-ip_domain_name_system"},{"cpes":["cpe:2.3:a:f5:big-ip_edge_gateway:14.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_edge_gateway:14.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_edge_gateway:15.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"14.0.0"},{"last_affected":"14.0.0"},{"introduced":"14.1.0"},{"last_affected":"14.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.0.0"}],"source":"CPE_STRING","vendor_product":"f5:big-ip_edge_gateway"},{"cpes":["cpe:2.3:a:f5:big-ip_fraud_protection_service:14.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_fraud_protection_service:14.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_fraud_protection_service:15.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"14.0.0"},{"last_affected":"14.0.0"},{"introduced":"14.1.0"},{"last_affected":"14.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.0.0"}],"source":"CPE_STRING","vendor_product":"f5:big-ip_fraud_protection_service"},{"cpes":["cpe:2.3:a:f5:big-ip_global_traffic_manager:14.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_global_traffic_manager:14.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_global_traffic_manager:15.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_global_traffic_manager:9.2.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.2.2"},{"last_affected":"9.2.2"},{"introduced":"14.0.0"},{"last_affected":"14.0.0"},{"introduced":"14.1.0"},{"last_affected":"14.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.0.0"}],"source":"CPE_STRING","vendor_product":"f5:big-ip_global_traffic_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_link_controller:14.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:14.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:15.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:9.2.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.2.2"},{"last_affected":"9.2.2"},{"introduced":"14.0.0"},{"last_affected":"14.0.0"},{"introduced":"14.1.0"},{"last_affected":"14.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.0.0"}],"source":"CPE_STRING","vendor_product":"f5:big-ip_link_controller"},{"cpes":["cpe:2.3:a:f5:big-ip_local_traffic_manager:14.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:14.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:15.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"14.0.0"},{"last_affected":"14.0.0"},{"introduced":"14.1.0"},{"last_affected":"14.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.0.0"}],"source":"CPE_STRING","vendor_product":"f5:big-ip_local_traffic_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_policy_enforcement_manager:14.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:14.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:9.2.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.2.2"},{"last_affected":"9.2.2"},{"introduced":"14.0.0"},{"last_affected":"14.0.0"},{"introduced":"14.1.0"},{"last_affected":"14.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.0.0"}],"source":"CPE_STRING","vendor_product":"f5:big-ip_policy_enforcement_manager"},{"cpes":["cpe:2.3:a:f5:big-ip_webaccelerator:14.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_webaccelerator:14.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_webaccelerator:15.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_webaccelerator:9.2.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.2.2"},{"last_affected":"9.2.2"},{"introduced":"14.0.0"},{"last_affected":"14.0.0"},{"introduced":"14.1.0"},{"last_affected":"14.1.0"},{"introduced":"15.0.0"},{"last_affected":"15.0.0"}],"source":"CPE_STRING","vendor_product":"f5:big-ip_webaccelerator"},{"cpes":["cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"3.1.1"},{"last_affected":"3.1.1"}],"source":"CPE_STRING","vendor_product":"f5:enterprise_manager"},{"cpes":["cpe:2.3:a:f5:iworkflow:2.3.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.3.0"},{"last_affected":"2.3.0"}],"source":"CPE_STRING","vendor_product":"f5:iworkflow"},{"cpes":["cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:*"],"extracted_events":[{"introduced":"9.11.7-s1"},{"last_affected":"9.11.7-s1"},{"introduced":"9.11.7-s1"},{"last_affected":"9.11.7-s1"}],"source":"CPE_STRING","vendor_product":"isc:bind"}]},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}