7.5Hoch KEV

CVE-2015-5477 ISC BIND Data Processing Errors Vulnerability

juniper junos; fedoraproject fedora; redhat enterprise linux; redhat enterprise linux aus Veröffentlicht: 2015-07-29 17:00 (vor 11 Jahren)

Bekannt ausgenutzt — ISC BIND Data Processing Errors Vulnerability

CISA hat am 08.10.2026 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 11.10.2026.

Erforderliche Maßnahme: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272 ; https://access.redhat.com/errata/RHSA-2015:1513.html; https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-5477

Beschreibung

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

Schwachstellentyp (CWE): CWE-617 CWE-19

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
apple	os x server	4.1.5
canonical	ubuntu linux	12.04
debian	debian linux	7.0
fedoraproject	fedora	21
hp	hp-ux	11.11
hp	openvms	5.7
hpe	dns	9.2.3
hpe	vcx	< 9.8.18
isc	bind	9.1.0 – < 9.9.7
juniper	junos	< 12.1
netapp	clustered data ontap	—
opensuse	evergreen	11.4
opensuse	opensuse	13.1
oracle	solaris	10
oracle	vm server	3.2
redhat	enterprise linux	5.0
redhat	enterprise linux aus	6.4
suse	linux enterprise debuginfo	11
suse	linux enterprise desktop	11
suse	linux enterprise server	10
suse	linux enterprise software development kit	11

Referenzen und Patches

http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html Third Party AdvisoryVDB Entry
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html Third Party Advisory
openSUSE-SU-2015:1326 vendor-advisoryMailing ListThird Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415 Third Party Advisory
https://kb.juniper.net/JSA10783 Third Party Advisory
RHSA-2015:1513 vendor-advisoryThird Party Advisory
SUSE-SU-2015:1305 vendor-advisoryMailing ListThird Party Advisory
https://security.netapp.com/advisory/ntap-20160114-0001/ Third Party Advisory
https://kb.isc.org/article/AA-01438 Broken Link
FEDORA-2015-12316 vendor-advisoryMailing ListThird Party Advisory
HPSBUX03410 vendor-advisoryMailing ListThird Party Advisory
SSRT102248 vendor-advisoryMailing ListThird Party Advisory
RHSA-2016:0079 vendor-advisoryThird Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918 Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718 MitigationThird Party Advisory
RHSA-2015:1514 vendor-advisoryThird Party Advisory
USN-2693-1 vendor-advisoryThird Party Advisory
https://support.apple.com/kb/HT205032 Third Party Advisory
1033100 vdb-entryBroken Link
https://kb.isc.org/article/AA-01307 Broken Link
76092 vdb-entryThird Party Advisory
SUSE-SU-2015:1316 vendor-advisoryMailing ListThird Party Advisory
openSUSE-SU-2015:1335 vendor-advisoryMailing ListThird Party Advisory
37721 exploitExploitThird Party AdvisoryVDB Entry
RHSA-2015:1515 vendor-advisoryThird Party Advisory
SUSE-SU-2015:1322 vendor-advisoryMailing ListThird Party Advisory
GLSA-201510-01 vendor-advisoryThird Party Advisory
SUSE-SU-2015:1304 vendor-advisoryMailing ListThird Party Advisory
HPSBOV03506 vendor-advisoryMailing ListThird Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480 Third Party Advisory
DSA-3319 vendor-advisoryMailing ListThird Party Advisory
FEDORA-2015-12357 vendor-advisoryMailing ListThird Party Advisory
HPSBUX03400 vendor-advisoryMailing ListThird Party Advisory
FEDORA-2015-12335 vendor-advisoryMailing ListThird Party Advisory
37723 exploitThird Party AdvisoryVDB Entry
https://kb.isc.org/article/AA-01305 Broken Link
RHSA-2016:0078 vendor-advisoryThird Party Advisory
SUSE-SU-2016:0227 vendor-advisoryMailing ListThird Party Advisory
https://kb.isc.org/article/AA-01306 Broken Link
https://kc.mcafee.com/corporate/index?page=content&id=SB10126 Broken Link
https://kb.isc.org/article/AA-01272 Broken LinkPatchVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5477 US Government Resource

CPE-Treffer (NVD) (60)

cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* < 12.1
cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* ≥ 13.1 < 13.2
cpe:2.3:o:juniper:junos:12.1:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1:r11:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1r:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d15:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d20:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d25:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d30:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d35:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d40:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d45:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d50:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:d10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:d15:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:d20:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:d30:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x47:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x47:d15:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x47:d20:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x47:d25:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3:r10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3:r10-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3:r10-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x48:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:d20:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:d30:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:d35:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:d40:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:d45:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r4:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r5:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r6:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r7:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r7-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r7-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r8:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2x51:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2x51:d15:*:*:*:*:*:*

CVSS-Score

7.5Hoch

Quelle: CISA-ADP · CVSS 3.1

Angriffsvektor: Netzwerk
Komplexität: Niedrig
Rechte erforderlich: Keine
Benutzerinteraktion: Keine
Geltungsbereich: Unverändert
Vertraulichkeit: Keine
Integrität: Keine
Verfügbarkeit: Hoch

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Alle Scores (3)

CISA-ADP	CVSS 3.1	7.5Hoch
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	7.5Hoch
nvd	CVSS 2.0	7.8Hoch

EPSS (Ausnutzungswahrscheinlichkeit in 30 Tagen)

99.58%

höher als 100 % aller CVEs

CISA-Bewertung (SSVC)

Ausnutzung: active
Automatisierbar: yes
Technische Auswirkung: total

Zeitverlauf

ID reserviert2015-07-10
Veröffentlicht2015-07-29 17:00
Bei IP-DB eingegangen2026-10-24 23:28
In KEV aufgenommen2026-10-08
Zuletzt aktualisiert2026-11-04 02:47

Vergeben von (CNA): mitre
NVD-Status: Analyzed

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — ISC BIND 9

7.5Hoch

CVE-2026-97313 vor 16 Tagen

Specific RPZ configurations and query patterns may result in an unexpected exit

ISC BIND 9

A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, resulting in a denial of service. To be vulnerable, the BIND server must allow recursive queries and have …

7.5Hoch

CVE-2026-96888 vor 16 Tagen

Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization

ISC BIND 9

A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through…

8.1Hoch

CVE-2026-94300 vor 16 Tagen

Concurrent GSS-TSIG messages corrupt memory

ISC BIND 9

Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacke…

7.5Hoch

CVE-2026-19630 vor 16 Tagen

Amplified resource exhaustion in inbound message processing

ISC BIND 9

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate am…

5.9Mittel

CVE-2026-77119 vor 1 Monat

NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets

ISC BIND 9

A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged unsigned answer through. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21…

5.3Mittel

CVE-2026-75029 vor 1 Monat

Message parser retains every identical singleton RDATA, enabling wire-to-work amplification

ISC BIND 9

In a query response, an attacker may send `named` multiple copies of a record that should only exist once (such as an SOA record). If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory …