CVE-2019-6477

Name of the Vulnerable Software and Affected Versions BIND versions (affected versions not specified)

Description The issue is related to pipelining in BIND, where each incoming query on a TCP connection requires significant resource allocation. A client using a TCP-pipelined connection could consume more resources than the server is provisioned to handle, leading to the server becoming unresponsive when a TCP connection with multiple pipelined queries is closed. This can be perceived as an intermittent server problem. The vulnerability can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.