CVE Feed

Dashboard / CVE / CVE-2015-5477

CVE-2015-5477

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

Published:Jul 28, 2015

Last Modified:Apr 12, 2025

EPS:Jul 29, 2015

EPSS Score:0.92832

CVSS Score:7.8

Affected Products

Vendor

Product

Action

Vendor

Isc

Product

Bind

Isc

Bind

Vendor

Redhat

Product

Enterprise Linux

Redhat

Enterprise Linux

Vendor

Redhat

Product

Rhel Aus

Redhat

Rhel Aus

Vendor

Redhat

Product

Rhel Eus

Redhat

Rhel Eus

Exploits

https://www.exploit-db.com/exploits/37721 https://github.com/elceef/tkeypoc https://github.com/hmlio/vaas-cve-2015-5477 https://github.com/ilanyu/cve-2015-5477 https://github.com/knqyf263/cve-2015-5477 https://github.com/likekabin/ShareDoc_cve-2015-5477 https://github.com/robertdavidgraham/cve-2015-5477 https://github.com/xycloops123/TKEY-remote-DoS-vulnerability-exploit https://www.exploit-db.com/exploits/37723

Common Weakness Enumeration

CWE-456 Missing Initialization of a Variable

CWE-617 Reachable Assertion

Common Attack Pattern Enumeration and Classification (CAPEC)

No CAPEC recorded yet

Related CVEs

CVE-2026-12617 (CVSS 7.5) — The issue is unexpected program termination based on ordering and/or specific content in responses to queries …

CVE-2026-11605 (CVSS 7.5) — The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all …

CVE-2026-10723 (CVSS 6.8) — BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authentica…

CVE-2026-10822 (CVSS 6.5) — If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and m…

CVE-2026-13204 (CVSS 7.5) — If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RR…

CVE-2026-11331 (CVSS 7.5) — An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names…

CVE-2026-11622 (CVSS 7.5) — A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer f…

CVE-2026-11721 (CVSS 7.5) — It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels …

CVE-2026-13321 (CVSS 8.6) — The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the si…

CVE-2026-5950 (CVSS 5.3) — An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling,…

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718

http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html

http://marc.info/?l=bugtraq&m=144000632319155&w=2

http://marc.info/?l=bugtraq&m=144017354030745&w=2

http://marc.info/?l=bugtraq&m=144181171013996&w=2

http://marc.info/?l=bugtraq&m=144294073801304&w=2

http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html

http://rhn.redhat.com/errata/RHSA-2015-1513.html

http://rhn.redhat.com/errata/RHSA-2015-1514.html

http://rhn.redhat.com/errata/RHSA-2015-1515.html

http://rhn.redhat.com/errata/RHSA-2016-0078.html

http://rhn.redhat.com/errata/RHSA-2016-0079.html

http://www.debian.org/security/2015/dsa-3319

http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

http://www.securityfocus.com/bid/76092

http://www.securitytracker.com/id/1033100

http://www.ubuntu.com/usn/USN-2693-1

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918

https://kb.isc.org/article/AA-01272

https://kb.isc.org/article/AA-01305

https://kb.isc.org/article/AA-01306

https://kb.isc.org/article/AA-01307

https://kb.isc.org/article/AA-01438

https://kb.juniper.net/JSA10783

https://kc.mcafee.com/corporate/index?page=content&id=SB10126

https://security.gentoo.org/glsa/201510-01

https://security.netapp.com/advisory/ntap-20160114-0001/

https://support.apple.com/kb/HT205032

https://www.exploit-db.com/exploits/37721/

https://www.exploit-db.com/exploits/37723/

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718

http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html

http://marc.info/?l=bugtraq&m=144000632319155&w=2

http://marc.info/?l=bugtraq&m=144017354030745&w=2

http://marc.info/?l=bugtraq&m=144181171013996&w=2

http://marc.info/?l=bugtraq&m=144294073801304&w=2

http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html

http://rhn.redhat.com/errata/RHSA-2015-1513.html

http://rhn.redhat.com/errata/RHSA-2015-1514.html

http://rhn.redhat.com/errata/RHSA-2015-1515.html

http://rhn.redhat.com/errata/RHSA-2016-0078.html

http://rhn.redhat.com/errata/RHSA-2016-0079.html

http://www.debian.org/security/2015/dsa-3319

http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

http://www.securityfocus.com/bid/76092

http://www.securitytracker.com/id/1033100

http://www.ubuntu.com/usn/USN-2693-1

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918

https://kb.isc.org/article/AA-01272

https://kb.isc.org/article/AA-01305

https://kb.isc.org/article/AA-01306

https://kb.isc.org/article/AA-01307

https://kb.isc.org/article/AA-01438

https://kb.juniper.net/JSA10783

https://kc.mcafee.com/corporate/index?page=content&id=SB10126

https://security.gentoo.org/glsa/201510-01

https://security.netapp.com/advisory/ntap-20160114-0001/

https://support.apple.com/kb/HT205032

https://www.exploit-db.com/exploits/37721/

https://www.exploit-db.com/exploits/37723/

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High