Detections
Analytics
Alpine: bind: security update to 0
high Tenable Cloud Security Plugin ID 403627
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when
operating in DHCPv6 mode. There was also a bug in dhcpd relating to the use of this function per its
documentation, but the bug in the library function prevented this from causing any harm. All releases of
dhcpd from ISC contain copies of this, and other, BIND libraries in combinations that have been tested
prior to release and are known to not present issues like this. Some third-party packagers of ISC software
have modified the dhcpd source, BIND source, or version matchup in ways that create the crash potential.
Based on reports available to ISC, the crash probability is large and no analysis has been done on how, or
even if, the probability can be manipulated by an attacker. Affects: Builds of dhcpd versions prior to
version 4.4.1 when using BIND versions 9.11.2 or later, or BIND versions with specific bug fixes
backported to them. ISC does not have access to comprehensive version lists for all repackagings of dhcpd
that are vulnerable. In particular, builds from other vendors may also be affected. Operators are advised
to consult their vendor documentation. (CVE-2019-6470)
See Also
Plugin Details
Severity: High
ID: 403627
Version: Revision 1.26
Type: Local
Published: 10/31/2023
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 5.7
Percentile: 97
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS Score Source: CVE-2019-6470
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 5/11/2019
Reference Information
CVE: CVE-2019-6470