CVEvulnerability

CVE-2019-6477

7.5 HIGH Published 2019-11-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-11-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-400

Description

With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than the server has been provisioned to handle. When a TCP connection with a large number of pipelined queries is closed, the load on the server releasing these multiple resources can cause it to become unresponsive, even for queries that can be answered authoritatively or from cache. (This is most likely to be perceived as an intermittent server problem).

Affected configurations

• isc bind (>= 9.11.7 <= 9.11.12) • isc bind (>= 9.14.1 <= 9.14.7) • isc bind (>= 9.15.0 <= 9.15.5) • isc bind 9.11.5 • isc bind 9.11.6 • isc bind 9.11.12 • isc bind 9.12.4 • fedoraproject fedora 30 • fedoraproject fedora 31

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References