CVE-2019-6468: BIND Supported Preview Edition can exit with an assertion failure if nxdomain-redirect is used

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-10-09 · updated 2026-06-17
Weakness: CWE-617

Description

In BIND Supported Preview Edition, an error in the nxdomain-redirect feature can occur in versions which support EDNS Client Subnet (ECS) features. In those versions which have ECS support, enabling nxdomain-redirect is likely to lead to BIND exiting due to assertion failure. Versions affected: BIND Supported Preview Edition version 9.10.5-S1 -> 9.11.5-S5. ONLY BIND Supported Preview Edition releases are affected.

Affected products

ISC BIND: 9.10.5-s1, 9.11.5-s5

References

https://kb.isc.org/docs/cve-2019-6468
https://www.synology.com/security/advisory/Synology_SA_19_20
https://kb.isc.org/docs/cve-2019-6468
https://www.synology.com/security/advisory/Synology_SA_19_20

Get alerted when CVE-2019-6468 or the next vulnerability affects your stack