Skip to content
Sign in
7.5 High

CVE-2019-6477 With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query…

Description

With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than the server has been provisioned to handle. When a TCP connection with a large number of pipelined queries is closed, the load on the server releasing these multiple resources can cause it to become unresponsive, even for queries that can be answered authoritatively or from cache. (This is most likely to be perceived as an intermittent server problem).

Affected products and versions

Product Affected versions Fixed in
BIND9 Versions not published

Other CVEs of BIND9

The 23 CVEs of BIND9 →
CVE-2022-3080 By sending specific queries to the resolver, an attacker can cause named to crash 7.5 High CVE-2022-38178 By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small… 7.5 High CVE-2022-38177 By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small… 7.5 High CVE-2022-2906 An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of… 7.5 High
Track this CVE