CVE-2015-5477

Description

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

Scoring

• CVSS: 7.5 (HIGH, 3.1)
• EPSS exploitation probability: Not yet available
• EPSS percentile: Not yet available

CISA KEV status

• Added to KEV: 2026-10-08
• Remediation due date: 2026-10-11
• Known ransomware campaign use: Unknown

Weakness types (CWE)

• CWE-19
• CWE-617

References

• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718
• http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html
• http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html
• http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html
• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html

More from ISC

• No other tracked CVEs for this vendor yet.