A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if a forwarder returns a referral rather than resolving the query. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to 9.15.4.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other
    servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC
    validation before being used in answers, as if it had been looked up via traditional recursion, and when
    mirror zone data cannot be validated, BIND falls back to using traditional recursion instead of the mirror
    zone. However, an error in the validity checks for the incoming zone data can allow an on-path attacker to
    replace zone data that was validated with a configured trust anchor with forged data of the attacker's
    choosing. The mirror zone feature is most often used to serve a local copy of the root zone. If an
    attacker was able to insert themselves into the network path between a recursive server using a mirror
    zone and a root name server, this vulnerability could then be used to cause the recursive server to accept
    a copy of falsified root zone data. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to
    9.15.4. (CVE-2019-6475)

  - A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if
    a forwarder returns a referral rather than resolving the query. This affects BIND versions 9.14.0 up to
    9.14.6, and 9.15.0 up to 9.15.4. (CVE-2019-6476)

An update of the bindutils package has been released.

ISC BIND versions 9.14.6 / 9.15.4 and earlier are affected by multiple vulnerabilities.
  - A flaw in mirror zone validity checking. It can allow zone data to be spoofed.
    (CVE-2019-6475)

  - A defect in code added to support QNAME minimization can cause named to exit with an     assertion failure if a forwarder returns a referral rather than resolving the query.
    (CVE-2019-6476)

ID	Name	Product	Family	Severity
423707	Alpine: multiple bind packages: security update to 9.14.7-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
423707	Alpine: multiple bind packages: security update to 9.14.7-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
132987	Photon OS 2.0: Bindutils PHSA-2020-2.0-0199	Nessus	PhotonOS Local Security Checks	high
130212	ISC BIND 9.14.x < 9.14.7 / 9.15.x < 9.15.5 Multiple Vulnerabilities	Nessus	DNS	high

Detections

Analytics

CVE-2019-6476

high

Tenable Plugins

high

high

high

high