CVE-2019-6465: Zone transfer controls for writable DLZ zones were not effective

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-10-09 · updated 2026-06-17
Weakness: CWE-732

Description

Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2019-6465.

Affected products

ISC BIND: from 9.9.0 through 9.10.7; from 9.11.0 through 9.11.4; from 9.12.0 through 9.12.2; from 9.13.0 through 9.13.6; 9.9.3-s1, 9.10.8, 9.10.8-p1, 9.11.5, 9.11.5-p1, 9.11.5-p2 (+4)
Red Hat Enterprise Linux: 8.0

References

Get alerted when CVE-2019-6465 or the next vulnerability affects your stack