What’s Vulnerable › Vulnerabilities

CVE-2019-6471: A race condition when discarding malformed packets can cause BIND to exit with an assertion failure

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-10-09 · updated 2026-06-17
• Weakness: CWE-362

Description

A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.

Affected products

• F5 BIG-IP APM: from 11.5.2 through 11.5.9; from 11.6.1 through 11.6.4; from 12.1.0 through 12.1.4; from 13.1.0 through 13.1.1; 14.0.0, 14.1.0, 15.0.0
• BIG-IP: from 11.5.2 through 11.5.9; from 11.6.1 through 11.6.4; from 12.1.0 through 12.1.4; from 13.1.0 through 13.1.1; 14.0.0, 14.1.0, 15.0.0
• F5 Big-Ip Analytics: from 11.5.2 through 11.5.9; from 11.6.1 through 11.6.4; from 12.1.0 through 12.1.4; from 13.1.0 through 13.1.1; 14.0.0, 14.1.0, 15.0.0
• F5 Networks, Inc. BIG-IP (AAM): from 11.5.2 through 11.5.9; from 11.6.1 through 11.6.4; from 12.1.0 through 12.1.4; from 13.1.0 through 13.1.1; 14.0.0, 14.1.0, 15.0.0
• BIG-IP ASM: from 11.5.2 through 11.5.9; from 11.6.1 through 11.6.4; from 12.1.0 through 12.1.4; from 13.1.0 through 13.1.1; 14.0.0, 14.1.0, 15.0.0
• F5 BIG-IP DNS: from 11.5.2 through 11.5.9; from 11.6.1 through 11.6.4; from 12.1.0 through 12.1.4; from 13.1.0 through 13.1.1; 9.2.2, 14.0.0, 14.1.0, 15.0.0
• F5 Big-Ip Edge Gateway: from 11.5.2 through 11.5.9; from 11.6.1 through 11.6.4; from 12.1.0 through 12.1.4; from 13.1.0 through 13.1.1; 14.0.0, 14.1.0, 15.0.0
• F5 Big-Ip Fraud Protection Service: from 11.5.2 through 11.5.9; from 11.6.1 through 11.6.4; from 12.1.0 through 12.1.4; from 13.1.0 through 13.1.1; 14.0.0, 14.1.0, 15.0.0
• F5 Big-Ip Global Traffic Manager: from 11.5.2 through 11.5.9; from 11.6.1 through 11.6.4; from 12.1.0 through 12.1.4; from 13.1.0 through 13.1.1; 9.2.2, 14.0.0, 14.1.0, 15.0.0
• F5 Big-Ip Link Controller: from 11.5.2 through 11.5.9; from 11.6.1 through 11.6.4; from 12.1.0 through 12.1.4; from 13.1.0 through 13.1.1; 9.2.2, 14.0.0, 14.1.0, 15.0.0
• F5 BIG-IP (LTM): from 11.5.2 through 11.5.9; from 11.6.1 through 11.6.4; from 12.1.0 through 12.1.4; from 13.1.0 through 13.1.1; 14.0.0, 14.1.0, 15.0.0
• F5 Networks, Inc. BIG-IP (PEM): from 11.5.2 through 11.5.9; from 11.6.1 through 11.6.4; from 12.1.0 through 12.1.4; from 13.1.0 through 13.1.1; 9.2.2, 14.0.0, 14.1.0, 15.0.0
• F5 Big-Ip Webaccelerator: from 11.5.2 through 11.5.9; from 11.6.1 through 11.6.4; from 12.1.0 through 12.1.4; from 13.1.0 through 13.1.1; 9.2.2, 14.0.0, 14.1.0, 15.0.0
• F5 BIG-IQ: from 5.1.0 through 5.4.0; from 6.0.0 through 6.1.0
• F5 Networks, Inc. Enterprise Manager: 3.1.1
• F5 Networks, Inc. iWorkflow: 2.3.0
• ISC BIND: from 9.11.0 through 9.11.7; from 9.12.0 through 9.12.3; from 9.13.0 through 9.13.7; from 9.14.0 through 9.14.2; from 9.15.0 through 9.15.5; 9.11.3-s1, 9.11.7-s1, 9.12.4, 9.12.4-p1

References

• https://kb.isc.org/docs/cve-2019-6471
• https://support.f5.com/csp/article/K10092301?utm_source=f5support&amp%3Butm_medium=RSS
• https://kb.isc.org/docs/cve-2019-6471
• https://support.f5.com/csp/article/K10092301?utm_source=f5support&amp%3Butm_medium=RSS

Get alerted when CVE-2019-6471 or the next vulnerability affects your stack