CVE-2019-6469: ISC BIND

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

An error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with an assertion failure when processing a response that has malformed RRSIGs. Versions affected: BIND 9.10.5-S1 -> 9.11.6-S1 of BIND 9 Supported Preview Edition.

Affected products

• ISC BIND: version 9.10.5 only; version 9.11.6 only

Published 2019-10-09. Last modified 2026-06-17.