7.5High KEV

CVE-2015-5477 ISC BIND Data Processing Errors Vulnerability

juniper junos; fedoraproject fedora; redhat enterprise linux; redhat enterprise linux aus Published: 2015-07-29 17:00 (11 years ago)

Known exploited — ISC BIND Data Processing Errors Vulnerability

CISA confirmed this vulnerability is used in real attacks on 08.10.2026. Remediation deadline for US federal agencies: 11.10.2026.

Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272 ; https://access.redhat.com/errata/RHSA-2015:1513.html; https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-5477

Description

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

Weakness (CWE): CWE-617 CWE-19

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
apple	os x server	4.1.5
canonical	ubuntu linux	12.04
debian	debian linux	7.0
fedoraproject	fedora	21
hp	hp-ux	11.11
hp	openvms	5.7
hpe	dns	9.2.3
hpe	vcx	< 9.8.18
isc	bind	9.1.0 – < 9.9.7
juniper	junos	< 12.1
netapp	clustered data ontap	—
opensuse	evergreen	11.4
opensuse	opensuse	13.1
oracle	solaris	10
oracle	vm server	3.2
redhat	enterprise linux	5.0
redhat	enterprise linux aus	6.4
suse	linux enterprise debuginfo	11
suse	linux enterprise desktop	11
suse	linux enterprise server	10
suse	linux enterprise software development kit	11

References and patches

http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html Third Party AdvisoryVDB Entry
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html Third Party Advisory
openSUSE-SU-2015:1326 vendor-advisoryMailing ListThird Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415 Third Party Advisory
https://kb.juniper.net/JSA10783 Third Party Advisory
RHSA-2015:1513 vendor-advisoryThird Party Advisory
SUSE-SU-2015:1305 vendor-advisoryMailing ListThird Party Advisory
https://security.netapp.com/advisory/ntap-20160114-0001/ Third Party Advisory
https://kb.isc.org/article/AA-01438 Broken Link
FEDORA-2015-12316 vendor-advisoryMailing ListThird Party Advisory
HPSBUX03410 vendor-advisoryMailing ListThird Party Advisory
SSRT102248 vendor-advisoryMailing ListThird Party Advisory
RHSA-2016:0079 vendor-advisoryThird Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918 Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718 MitigationThird Party Advisory
RHSA-2015:1514 vendor-advisoryThird Party Advisory
USN-2693-1 vendor-advisoryThird Party Advisory
https://support.apple.com/kb/HT205032 Third Party Advisory
1033100 vdb-entryBroken Link
https://kb.isc.org/article/AA-01307 Broken Link
76092 vdb-entryThird Party Advisory
SUSE-SU-2015:1316 vendor-advisoryMailing ListThird Party Advisory
openSUSE-SU-2015:1335 vendor-advisoryMailing ListThird Party Advisory
37721 exploitExploitThird Party AdvisoryVDB Entry
RHSA-2015:1515 vendor-advisoryThird Party Advisory
SUSE-SU-2015:1322 vendor-advisoryMailing ListThird Party Advisory
GLSA-201510-01 vendor-advisoryThird Party Advisory
SUSE-SU-2015:1304 vendor-advisoryMailing ListThird Party Advisory
HPSBOV03506 vendor-advisoryMailing ListThird Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480 Third Party Advisory
DSA-3319 vendor-advisoryMailing ListThird Party Advisory
FEDORA-2015-12357 vendor-advisoryMailing ListThird Party Advisory
HPSBUX03400 vendor-advisoryMailing ListThird Party Advisory
FEDORA-2015-12335 vendor-advisoryMailing ListThird Party Advisory
37723 exploitThird Party AdvisoryVDB Entry
https://kb.isc.org/article/AA-01305 Broken Link
RHSA-2016:0078 vendor-advisoryThird Party Advisory
SUSE-SU-2016:0227 vendor-advisoryMailing ListThird Party Advisory
https://kb.isc.org/article/AA-01306 Broken Link
https://kc.mcafee.com/corporate/index?page=content&id=SB10126 Broken Link
https://kb.isc.org/article/AA-01272 Broken LinkPatchVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5477 US Government Resource

CPE matches (NVD) (60)

cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* < 12.1
cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* ≥ 13.1 < 13.2
cpe:2.3:o:juniper:junos:12.1:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1:r11:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1r:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d15:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d20:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d25:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d30:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d35:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d40:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d45:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d50:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:d10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:d15:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:d20:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:d30:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x47:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x47:d15:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x47:d20:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x47:d25:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3:r10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3:r10-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3:r10-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x48:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:d20:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:d30:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:d35:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:d40:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:d45:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r4:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r5:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r6:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r7:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r7-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r7-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r8:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2x51:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2x51:d15:*:*:*:*:*:*

CVSS score

7.5High

Source: CISA-ADP · CVSS 3.1

Attack vector: Network
Attack complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

All scores (3)

CISA-ADP	CVSS 3.1	7.5High
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	7.5High
nvd	CVSS 2.0	7.8High

EPSS (chance of exploitation in 30 days)

99.58%

higher than 100% of all CVEs

CISA assessment (SSVC)

Exploitation: active
Automatable: yes
Technical impact: total

Timeline

ID reserved2015-07-10
Published2015-07-29 17:00
Reached IP-DB2026-10-24 23:28
Added to KEV2026-10-08
Last updated2026-11-04 02:47

Assigned by (CNA): mitre
NVD status: Analyzed

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Recent CVEs in the same product — ISC BIND 9

7.5High

CVE-2026-97313 17 days ago

Specific RPZ configurations and query patterns may result in an unexpected exit

ISC BIND 9

A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, resulting in a denial of service. To be vulnerable, the BIND server must allow recursive queries and have …

7.5High

CVE-2026-96888 17 days ago

Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization

ISC BIND 9

A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through…

8.1High

CVE-2026-94300 17 days ago

Concurrent GSS-TSIG messages corrupt memory

ISC BIND 9

Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacke…

7.5High

CVE-2026-19630 17 days ago

Amplified resource exhaustion in inbound message processing

ISC BIND 9

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate am…

5.9Medium

CVE-2026-77119 1 month ago

NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets

ISC BIND 9

A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged unsigned answer through. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21…

5.3Medium

CVE-2026-75029 1 month ago

Message parser retains every identical singleton RDATA, enabling wire-to-work amplification

ISC BIND 9

In a query response, an attacker may send `named` multiple copies of a record that should only exist once (such as an SOA record). If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory …