7.5Yüksek KEV

CVE-2015-5477 ISC BIND Data Processing Errors Vulnerability

juniper junos; fedoraproject fedora; redhat enterprise linux; redhat enterprise linux aus Yayım: 2015-07-29 17:00 (11 yıl önce)

Aktif olarak istismar ediliyor — ISC BIND Data Processing Errors Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 08.10.2026 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 11.10.2026.

Gerekli işlem: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272 ; https://access.redhat.com/errata/RHSA-2015:1513.html; https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-5477

Açıklama

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

Zayıflık türü (CWE): CWE-617 CWE-19

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
apple	os x server	4.1.5
canonical	ubuntu linux	12.04
debian	debian linux	7.0
fedoraproject	fedora	21
hp	hp-ux	11.11
hp	openvms	5.7
hpe	dns	9.2.3
hpe	vcx	< 9.8.18
isc	bind	9.1.0 – < 9.9.7
juniper	junos	< 12.1
netapp	clustered data ontap	—
opensuse	evergreen	11.4
opensuse	opensuse	13.1
oracle	solaris	10
oracle	vm server	3.2
redhat	enterprise linux	5.0
redhat	enterprise linux aus	6.4
suse	linux enterprise debuginfo	11
suse	linux enterprise desktop	11
suse	linux enterprise server	10
suse	linux enterprise software development kit	11

Kaynaklar ve yamalar

http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html Third Party AdvisoryVDB Entry
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html Third Party Advisory
openSUSE-SU-2015:1326 vendor-advisoryMailing ListThird Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415 Third Party Advisory
https://kb.juniper.net/JSA10783 Third Party Advisory
RHSA-2015:1513 vendor-advisoryThird Party Advisory
SUSE-SU-2015:1305 vendor-advisoryMailing ListThird Party Advisory
https://security.netapp.com/advisory/ntap-20160114-0001/ Third Party Advisory
https://kb.isc.org/article/AA-01438 Broken Link
FEDORA-2015-12316 vendor-advisoryMailing ListThird Party Advisory
HPSBUX03410 vendor-advisoryMailing ListThird Party Advisory
SSRT102248 vendor-advisoryMailing ListThird Party Advisory
RHSA-2016:0079 vendor-advisoryThird Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918 Third Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718 MitigationThird Party Advisory
RHSA-2015:1514 vendor-advisoryThird Party Advisory
USN-2693-1 vendor-advisoryThird Party Advisory
https://support.apple.com/kb/HT205032 Third Party Advisory
1033100 vdb-entryBroken Link
https://kb.isc.org/article/AA-01307 Broken Link
76092 vdb-entryThird Party Advisory
SUSE-SU-2015:1316 vendor-advisoryMailing ListThird Party Advisory
openSUSE-SU-2015:1335 vendor-advisoryMailing ListThird Party Advisory
37721 exploitExploitThird Party AdvisoryVDB Entry
RHSA-2015:1515 vendor-advisoryThird Party Advisory
SUSE-SU-2015:1322 vendor-advisoryMailing ListThird Party Advisory
GLSA-201510-01 vendor-advisoryThird Party Advisory
SUSE-SU-2015:1304 vendor-advisoryMailing ListThird Party Advisory
HPSBOV03506 vendor-advisoryMailing ListThird Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480 Third Party Advisory
DSA-3319 vendor-advisoryMailing ListThird Party Advisory
FEDORA-2015-12357 vendor-advisoryMailing ListThird Party Advisory
HPSBUX03400 vendor-advisoryMailing ListThird Party Advisory
FEDORA-2015-12335 vendor-advisoryMailing ListThird Party Advisory
37723 exploitThird Party AdvisoryVDB Entry
https://kb.isc.org/article/AA-01305 Broken Link
RHSA-2016:0078 vendor-advisoryThird Party Advisory
SUSE-SU-2016:0227 vendor-advisoryMailing ListThird Party Advisory
https://kb.isc.org/article/AA-01306 Broken Link
https://kc.mcafee.com/corporate/index?page=content&id=SB10126 Broken Link
https://kb.isc.org/article/AA-01272 Broken LinkPatchVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5477 US Government Resource

CPE eşleşmeleri (NVD) (60)

cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* < 12.1
cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* ≥ 13.1 < 13.2
cpe:2.3:o:juniper:junos:12.1:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1:r11:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1r:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d15:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d20:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d25:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d30:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d35:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d40:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d45:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x44:d50:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:d10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:d15:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:d20:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x45:d30:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x47:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x47:d15:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x47:d20:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.1x47:d25:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3:r10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3:r10-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3:r10-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x48:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:d20:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:d30:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:d35:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:d40:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:12.3x50:d45:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r4:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r5:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r6:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r7:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r7-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r7-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2:r8:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2x51:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:13.2x51:d15:*:*:*:*:*:*

CVSS puanı

7.5Yüksek

Kaynak: CISA-ADP · CVSS 3.1

Saldırı yolu: Ağ
Karmaşıklık: Düşük
Gereken yetki: Yok
Kullanıcı etkileşimi: Gerekmez
Kapsam: Değişmez
Gizlilik: Yok
Bütünlük: Yok
Erişilebilirlik: Yüksek

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tüm puanlar (3)

CISA-ADP	CVSS 3.1	7.5Yüksek
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	7.5Yüksek
nvd	CVSS 2.0	7.8Yüksek

EPSS (30 günde istismar olasılığı)

99.58%

tüm CVE'lerin %100'inden yüksek

CISA değerlendirmesi (SSVC)

İstismar: active
Otomatikleştirilebilir: yes
Teknik etki: total

Zaman çizelgesi

Numara ayrıldı2015-07-10
Yayımlandı2015-07-29 17:00
IP-DB'ye ulaştı2026-10-24 23:28
KEV'e eklendi2026-10-08
Son güncelleme2026-11-04 02:47

Numarayı veren (CNA): mitre
NVD durumu: Analyzed

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — ISC BIND 9

7.5Yüksek

CVE-2026-97313 25 gün önce

Specific RPZ configurations and query patterns may result in an unexpected exit

ISC BIND 9

A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, resulting in a denial of service. To be vulnerable, the BIND server must allow recursive queries and have …

7.5Yüksek

CVE-2026-96888 25 gün önce

Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization

ISC BIND 9

A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through…

8.1Yüksek

CVE-2026-94300 25 gün önce

Concurrent GSS-TSIG messages corrupt memory

ISC BIND 9

Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacke…

7.5Yüksek

CVE-2026-19630 25 gün önce

Amplified resource exhaustion in inbound message processing

ISC BIND 9

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate am…

5.9Orta

CVE-2026-77119 2 ay önce

NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets

ISC BIND 9

A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged unsigned answer through. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21…

5.3Orta

CVE-2026-75029 2 ay önce

Message parser retains every identical singleton RDATA, enabling wire-to-work amplification

ISC BIND 9

In a query response, an attacker may send `named` multiple copies of a record that should only exist once (such as an SOA record). If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory …