CVE-2015-5477 kev in the critical feed json
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion f…
published 2015-07-29 11 y ago modified 2026-11-03 5 d ago also EUVD-2015-5432
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Exploited
- added 2026-10-08
- epss
- 99.6%
- EPSS 99.6% chance of exploitation in 30 days, percentile 99.9%
- public exploits
- 3
- Metasploit, Exploit-DB
Summary
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
Patch / fix
cisa required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- hpe vcx 9.8.18
- isc bind 9.9.7, 9.10.2
- juniper junos 12.1, 13.2
- bind9 Debian 14, Debian 13, Debian 12 1:9.9.5.dfsg-11
debian advisories DEBIAN-CVE-2015-5477
- bind9 Ubuntu 14.04 LTS 1:9.9.5.dfsg-3ubuntu0.4
ubuntu advisories UBUNTU-CVE-2015-5477
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- bind97 RHEL 5 32:9.7.0-21.P2.el5_11.2
- bind97-libs RHEL 5 32:9.7.0-21.P2.el5_11.2
- bind97-utils RHEL 5 32:9.7.0-21.P2.el5_11.2
- bind97-chroot RHEL 5 32:9.7.0-21.P2.el5_11.2
- bind RHEL 5 30:9.3.6-25.P1.el5_11.3
- bind-sdb RHEL 5 30:9.3.6-25.P1.el5_11.3
- bind-libs RHEL 5 30:9.3.6-25.P1.el5_11.3
- bind-utils RHEL 5 30:9.3.6-25.P1.el5_11.3
red hat advisories RHSA-2016:0079RHSA-2016:0078RHSA-2015:1515RHSA-2015:1514RHSA-2015:1513
- bind SLES for SAP 11 SP4, SLES for SAP 11 SP3, SLES 11 SP4 +7 more 9.9.6P1-0.12.1
- bind SLES 11 SP1-TERADATA, SLES 11 SP1-LTSS 9.6ESVR11W1-0.6.1
- bind SLES for SAP 12, SLES 12, SLED 12 +1 more 9.9.6P1-23.1
suse advisories SUSE-SU-2015:1304-1SUSE-SU-2015:1316-1SUSE-SU-2015:1305-1
- bind openSUSE Tumbleweed 9.10.3P4-21.1
opensuse advisories openSUSE-SU-2024:10467-1
- kb.isc.org/article/AA-01272 advisory
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2015-5477 updated cvss 5.0
bind: TKEY query handling flaw leading to denial of service
-
Red Hat Enterprise Linux 4 bindaffected: no fix planned “Out of support scope”
-
Red Hat Enterprise Linux (v. 5 server) bind 9.3.6-25.P1.el5_11.3, bind97 9.7.0-21.P2.el5_11.2, bind-sdb 9.3.6-25.P1.el5_11.3, bind-libs 9.3.6-25.P1.el5_11.3, bind-utils 9.3.6-25.P1.el5_11.3, bind-chroot 9.3.6-25.P1.el5_11.3, +4 morefixed: vendor fix RHSA-2015:1514
-
Red Hat Enterprise Linux Client (v. 7) bind 9.9.4-18.el7_1.3, bind-libs 9.9.4-18.el7_1.3, bind-utils 9.9.4-18.el7_1.3, bind-license 9.9.4-18.el7_1.3, bind-libs-lite 9.9.4-18.el7_1.3 Red Hat Enterprise Linux Client Optional (v. 7) bind 9.9.4-18.el7_1.3, bind-sdb 9.9.4-18.el7_1.3, bind-chroot 9.9.4-18.el7_1.3, bind-sdb-chroot 9.9.4-18.el7_1.3 Red Hat Enterprise Linux ComputeNode (v. 7) bind 9.9.4-18.el7_1.3, bind-libs 9.9.4-18.el7_1.3, bind-utils 9.9.4-18.el7_1.3, bind-license 9.9.4-18.el7_1.3, bind-libs-lite 9.9.4-18.el7_1.3 Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind 9.9.4-18.el7_1.3, bind-sdb 9.9.4-18.el7_1.3, bind-chroot 9.9.4-18.el7_1.3, bind-sdb-chroot 9.9.4-18.el7_1.3fixed: vendor fix RHSA-2015:1513
-
Red Hat Enterprise Linux Desktop (v. 5 client) bind 9.3.6-25.P1.el5_11.3, bind-sdb 9.3.6-25.P1.el5_11.3, bind-libs 9.3.6-25.P1.el5_11.3, bind-utils 9.3.6-25.P1.el5_11.3fixed: vendor fix RHSA-2015:1514
-
Red Hat Enterprise Linux Desktop (v. 6) bind 9.8.2-0.37.rc1.el6_7.2, bind-libs 9.8.2-0.37.rc1.el6_7.2, bind-utils 9.8.2-0.37.rc1.el6_7.2 Red Hat Enterprise Linux Desktop Optional (v. 6) bind 9.8.2-0.37.rc1.el6_7.2, bind-sdb 9.8.2-0.37.rc1.el6_7.2, bind-chroot 9.8.2-0.37.rc1.el6_7.2fixed: vendor fix RHSA-2015:1513
-
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) bind 9.3.6-25.P1.el5_11.3, bind97 9.7.0-21.P2.el5_11.2, bind-chroot 9.3.6-25.P1.el5_11.3, bind97-libs 9.7.0-21.P2.el5_11.2, bind97-utils 9.7.0-21.P2.el5_11.2, bind97-chroot 9.7.0-21.P2.el5_11.2, +1 morefixed: vendor fix RHSA-2015:1514
-
Red Hat Enterprise Linux HPC Node (v. 6) bind 9.8.2-0.37.rc1.el6_7.2, bind-libs 9.8.2-0.37.rc1.el6_7.2, bind-utils 9.8.2-0.37.rc1.el6_7.2fixed: vendor fix RHSA-2015:1513
-
Red Hat Enterprise Linux HPC Node EUS (v. 6.6) bind 9.8.2-0.30.rc1.el6_6.4, bind-libs 9.8.2-0.30.rc1.el6_6.4, bind-utils 9.8.2-0.30.rc1.el6_6.4fixed: vendor fix RHSA-2016:0079
show 9 moreshow fewer
-
Red Hat Enterprise Linux HPC Node Optional (v. 6) bind 9.8.2-0.37.rc1.el6_7.2, bind-sdb 9.8.2-0.37.rc1.el6_7.2, bind-chroot 9.8.2-0.37.rc1.el6_7.2fixed: vendor fix RHSA-2015:1513
-
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6) bind 9.8.2-0.30.rc1.el6_6.4, bind-sdb 9.8.2-0.30.rc1.el6_6.4, bind-chroot 9.8.2-0.30.rc1.el6_6.4fixed: vendor fix RHSA-2016:0079
-
Red Hat Enterprise Linux Server (v. 6) bind 9.8.2-0.37.rc1.el6_7.2, bind-libs 9.8.2-0.37.rc1.el6_7.2, bind-utils 9.8.2-0.37.rc1.el6_7.2, bind-chroot 9.8.2-0.37.rc1.el6_7.2 Red Hat Enterprise Linux Server (v. 7) bind 9.9.4-18.el7_1.3, bind 9.9.4-18.ael7b_1.3, bind-libs 9.9.4-18.el7_1.3, bind-utils 9.9.4-18.el7_1.3, bind-chroot 9.9.4-18.el7_1.3, bind-libs 9.9.4-18.ael7b_1.3, +6 morefixed: vendor fix RHSA-2015:1513
-
Red Hat Enterprise Linux Server AUS (v. 6.4) bind 9.8.2-0.17.rc1.el6_4.7, bind-libs 9.8.2-0.17.rc1.el6_4.7, bind-utils 9.8.2-0.17.rc1.el6_4.7, bind-chroot 9.8.2-0.17.rc1.el6_4.7 Red Hat Enterprise Linux Server AUS (v. 6.5) bind 9.8.2-0.23.rc1.el6_5.2, bind-libs 9.8.2-0.23.rc1.el6_5.2, bind-utils 9.8.2-0.23.rc1.el6_5.2, bind-chroot 9.8.2-0.23.rc1.el6_5.2fixed: vendor fix RHSA-2016:0078
-
Red Hat Enterprise Linux Server EUS (v. 6.6) bind 9.8.2-0.30.rc1.el6_6.4, bind-libs 9.8.2-0.30.rc1.el6_6.4, bind-utils 9.8.2-0.30.rc1.el6_6.4, bind-chroot 9.8.2-0.30.rc1.el6_6.4fixed: vendor fix RHSA-2016:0079
-
Red Hat Enterprise Linux Server Optional (v. 6) bind-sdb 9.8.2-0.37.rc1.el6_7.2 Red Hat Enterprise Linux Server Optional (v. 7) bind-sdb 9.9.4-18.el7_1.3, bind-sdb 9.9.4-18.ael7b_1.3, bind-sdb-chroot 9.9.4-18.el7_1.3, bind-sdb-chroot 9.9.4-18.ael7b_1.3fixed: vendor fix RHSA-2015:1513
-
Red Hat Enterprise Linux Server Optional AUS (v. 6.4) bind 9.8.2-0.17.rc1.el6_4.7, bind-sdb 9.8.2-0.17.rc1.el6_4.7 Red Hat Enterprise Linux Server Optional AUS (v. 6.5) bind 9.8.2-0.23.rc1.el6_5.2, bind-sdb 9.8.2-0.23.rc1.el6_5.2fixed: vendor fix RHSA-2016:0078
-
Red Hat Enterprise Linux Server Optional EUS (v. 6.6) bind-sdb 9.8.2-0.30.rc1.el6_6.4fixed: vendor fix RHSA-2016:0079
-
Red Hat Enterprise Linux Workstation (v. 6) bind 9.8.2-0.37.rc1.el6_7.2, bind-libs 9.8.2-0.37.rc1.el6_7.2, bind-utils 9.8.2-0.37.rc1.el6_7.2, bind-chroot 9.8.2-0.37.rc1.el6_7.2 Red Hat Enterprise Linux Workstation (v. 7) bind 9.9.4-18.el7_1.3, bind-libs 9.9.4-18.el7_1.3, bind-utils 9.9.4-18.el7_1.3, bind-chroot 9.9.4-18.el7_1.3, bind-license 9.9.4-18.el7_1.3, bind-libs-lite 9.9.4-18.el7_1.3 Red Hat Enterprise Linux Workstation Optional (v. 6) bind-sdb 9.8.2-0.37.rc1.el6_7.2 Red Hat Enterprise Linux Workstation Optional (v. 7) bind-sdb 9.9.4-18.el7_1.3, bind-sdb-chroot 9.9.4-18.el7_1.3fixed: vendor fix RHSA-2015:1513
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Timeline
- First public exploit (Metasploit auxiliary/dos/dns/bind_tkey)
- Published
- Added to CISA KEV
- CISA SSVC: exploitation active
- CISA patch deadline
Known exploited
- Added
- 32 d ago
- Patch by
- 2026-10-11 (29 d ago)
- Ransomware
- Not known
- Required action
- Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
- Vendor, product
- ISC, BIND
- CISA name
- ISC BIND Data Processing Errors Vulnerability
CISA SSVC
- Exploitation
- Active, exploited in the wild
- Automatable
- yes
- Technical impact
- total
- Assessed
- 31 d ago
Exploit prediction
99.58% chance of exploitation in the next 30 days, higher than 99.9% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- Metasploit auxiliary/dos/dns/bind_tkey BIND TKEY Query Denial of Service metasploit auxiliary, normal rank, 2015-07-28
- EDB-37723 ISC BIND 9 - TKEY Remote Denial of Service (PoC) dos, 2015-08-05
- EDB-37721 ISC BIND 9 - TKEY (PoC) dos, 2015-08-01
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 7.8 | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Classification
References
-
kb.isc.org
/article/AA-01272
broken-link, patch, vendor-advisory
-
exploit-db.com
/exploits/37721/
exploit, third-party-advisory, vdb-entry
-
exploit-db.com
/exploits/37723/
exploit
-
lists.opensuse.org
/opensuse-security-announce/2015-07/msg00050.html
vendor-advisory, mailing-list, third-party-advisory
-
rhn.redhat.com
/errata/RHSA-2015-1513.html
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2015-07/msg00044.html
vendor-advisory, mailing-list, third-party-advisory
-
lists.fedoraproject.org
/pipermail/package-announce/2015-August/163015.html
vendor-advisory, mailing-list, third-party-advisory
-
marc.info
/?l=bugtraq&m=144017354030745&w=2
vendor-advisory, mailing-list, third-party-advisory
-
marc.info
/?l=bugtraq&m=144294073801304&w=2
vendor-advisory, mailing-list, third-party-advisory
-
rhn.redhat.com
/errata/RHSA-2016-0079.html
vendor-advisory, third-party-advisory
-
rhn.redhat.com
/errata/RHSA-2015-1514.html
vendor-advisory, third-party-advisory
-
ubuntu.com
/usn/USN-2693-1
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2015-07/msg00045.html
vendor-advisory, mailing-list, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2015-08/msg00001.html
vendor-advisory, mailing-list, third-party-advisory
-
rhn.redhat.com
/errata/RHSA-2015-1515.html
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2015-07/msg00048.html
vendor-advisory, mailing-list, third-party-advisory
-
security.gentoo.org
/glsa/201510-01
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2015-07/msg00043.html
vendor-advisory, mailing-list, third-party-advisory
-
marc.info
/?l=bugtraq&m=144181171013996&w=2
vendor-advisory, mailing-list, third-party-advisory
-
debian.org
/security/2015/dsa-3319
vendor-advisory, mailing-list, third-party-advisory
-
lists.fedoraproject.org
/pipermail/package-announce/2015-August/163007.html
vendor-advisory, mailing-list, third-party-advisory
-
marc.info
/?l=bugtraq&m=144000632319155&w=2
vendor-advisory, mailing-list, third-party-advisory
-
lists.fedoraproject.org
/pipermail/package-announce/2015-August/163006.html
vendor-advisory, mailing-list, third-party-advisory
-
rhn.redhat.com
/errata/RHSA-2016-0078.html
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-01/msg00033.html
vendor-advisory, mailing-list, third-party-advisory
-
packetstormsecurity.com
/files/132926/BIND-TKEY-Query-Denial-Of-Service.html
third-party-advisory, vdb-entry
-
oracle.com
/technetwork/topics/security/ovmbulletinjul2016-3090546.html
third-party-advisory
-
h20564.www2.hpe.com
/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415
third-party-advisory
-
kb.juniper.net
/JSA10783
third-party-advisory
-
security.netapp.com
/advisory/ntap-20160114-0001/
third-party-advisory
-
kb.isc.org
/article/AA-01438
broken-link
-
h20566.www2.hpe.com
/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918
third-party-advisory
-
oracle.com
/technetwork/topics/security/bulletinjul2015-2511963.html
third-party-advisory
-
kb.juniper.net
/InfoCenter/index?page=content&id=JSA10718
mitigation, third-party-advisory
- support.apple.com /kb/HT205032
-
securitytracker.com
/id/1033100
vdb-entry, broken-link
-
kb.isc.org
/article/AA-01307
broken-link
-
securityfocus.com
/bid/76092
vdb-entry, third-party-advisory
-
h20564.www2.hpe.com
/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480
third-party-advisory
-
kb.isc.org
/article/AA-01305
broken-link
-
kb.isc.org
/article/AA-01306
broken-link
-
kc.mcafee.com
/corporate/index?page=content&id=SB10126
broken-link
Sources
- CVE List CVE-2015-5477
- NVD CVE-2015-5477
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.