CVE-2019-6477MEDIUM
Description
With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than the server has been provisioned to handle. When a TCP connection with a large number of pipelined queries is closed, the load on the server releasing these multiple resources can cause it to become unresponsive, even for queries that can be answered authoritatively or from cache. (This is most likely to be perceived as an intermittent server problem).
References
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00041.html
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00044.html
https://kb.isc.org/docs/cve-2019-6477
https://support.f5.com/csp/article/K15840535?utm_source=f5support&utm_medium=RSS
https://www.debian.org/security/2020/dsa-4689
https://www.synology.com/security/advisory/Synology_SA_19_39
Details
Source: MITRE
Published: 2019-11-26
Updated: 2020-10-20
Type: CWE-400
Risk Information
CVSS v2.0
Base Score: 5
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Impact Score: 2.9
Exploitability Score: 10
Severity: MEDIUM
CVSS v3.0
Base Score: 7.5
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 3.9
Severity: HIGH
Vulnerable Software
Configuration 1
OR
cpe:2.3:a:isc:bind:9.11.5:s6:*:*:supported_preview:*:*:*
cpe:2.3:a:isc:bind:9.11.6:p1:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.11.6:rc1:*:*:*:*:*:*
cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* versions from 9.11.7 to 9.11.12 (inclusive)
cpe:2.3:a:isc:bind:9.11.12:s1:*:*:supported_preview:*:*:*
cpe:2.3:a:isc:bind:9.12.4:p1:*:*:*:*:*:*
cpe:2.3:a:isc:bind:9.12.4:p2:*:*:*:*:*:*
cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* versions from 9.14.1 to 9.14.7 (inclusive)
cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:* versions from 9.15.0 to 9.15.5 (inclusive)
Configuration 2
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 144003 | NewStart CGSL CORE 5.05 / MAIN 5.05 : bind Multiple Vulnerabilities (NS-SA-2020-0095) | Nessus | NewStart CGSL Local Security Checks | medium |
| 143897 | NewStart CGSL CORE 5.04 / MAIN 5.04 : bind Multiple Vulnerabilities (NS-SA-2020-0063) | Nessus | NewStart CGSL Local Security Checks | medium |
| 143842 | SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2020:2914-1) | Nessus | SuSE Local Security Checks | medium |
| 141839 | openSUSE Security Update : bind (openSUSE-2020-1701) | Nessus | SuSE Local Security Checks | medium |
| 141560 | openSUSE Security Update : bind (openSUSE-2020-1699) | Nessus | SuSE Local Security Checks | medium |
| 138773 | NewStart CGSL MAIN 6.01 : bind Multiple Vulnerabilities (NS-SA-2020-0031) | Nessus | NewStart CGSL Local Security Checks | medium |
| 138043 | Amazon Linux 2 : bind (ALAS-2020-1441) | Nessus | Amazon Linux Local Security Checks | medium |
| 136721 | Debian DSA-4689-1 : bind9 - security update | Nessus | Debian Local Security Checks | medium |
| 136043 | RHEL 8 : bind (RHSA-2020:1845) | Nessus | Red Hat Local Security Checks | medium |
| 135801 | Scientific Linux Security Update : bind on SL7.x x86_64 (20200407) | Nessus | Scientific Linux Local Security Checks | medium |
| 135328 | CentOS 7 : bind (CESA-2020:1061) | Nessus | CentOS Local Security Checks | medium |
| 135142 | EulerOS Virtualization for ARM 64 3.0.6.0 : bind (EulerOS-SA-2020-1355) | Nessus | Huawei Local Security Checks | medium |
| 135069 | RHEL 7 : bind (RHSA-2020:1061) | Nessus | Red Hat Local Security Checks | medium |
| 133975 | EulerOS 2.0 SP8 : bind (EulerOS-SA-2020-1141) | Nessus | Huawei Local Security Checks | medium |
| 133625 | F5 Networks BIG-IP : BIND vulnerability (K15840535) | Nessus | F5 Networks Local Security Checks | medium |
| 132030 | Fedora 30 : 12:dhcp / 32:bind / bind-dyndb-ldap / dnsperf (2019-c703d2304a) | Nessus | Fedora Local Security Checks | medium |
| 131735 | ISC BIND 9.11.0 / 9.11.x < 9.11.13 / 9.11.x < 9.11.13-S1 / 9.12.x < 9.12.5-P2 / 9.14.x < 9.14.8 / 9.15 / 9.15.x < 9.15.6 Vulnerability | Nessus | DNS | medium |
| 131450 | Fedora 31 : 32:bind / bind-dyndb-ldap / dnsperf (2019-73a8737068) | Nessus | Fedora Local Security Checks | medium |
| 131225 | Ubuntu 18.04 LTS / 19.04 / 19.10 : Bind vulnerability (USN-4197-1) | Nessus | Ubuntu Local Security Checks | medium |
| 131178 | Slackware 14.0 / 14.1 / 14.2 / current : bind (SSA:2019-324-01) | Nessus | Slackware Local Security Checks | medium |