CVE-2019-6467: ISC BIND

High severity, CVSS 7.5. EPSS: 5.5% chance of exploitation in the next 30 days.

A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAIN redirection for recursive clients, is also serving a local copy of the root zone or using mirroring to provide the root zone, although other configurations are also possible. Versions affected: BIND 9.12.0-> 9.12.4, 9.14.0. Also affects all releases in the 9.13 development branch.

Affected products

• ISC BIND: from 9.12.0, up to and including 9.12.4; from 9.13.0, up to and including 9.13.7; version 9.14.0 only

Published 2019-10-09. Last modified 2026-06-17.