CVE Feed

    Dashboard / CVE / CVE-2015-5477

    CVE-2015-5477

    named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

    Published:Jul 28, 2015
    Last Modified:Oct 9, 2026
    EPS:Jul 29, 2015
    EPSS Score:0.91807
    CVSS Score:7.5

    CISA Notification

    Description

    named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

    Required Action:

    Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

    Notes:

    No extra notes provided.

    Due Date
    Oct 11, 2026
    18 days ago
    Alert Date
    Oct 8, 2026
    21 days ago

    Affected Products

    Vendor
    Apple
    Product
    Os X Server
    Vendor
    Canonical
    Product
    Ubuntu Linux
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Fedoraproject
    Product
    Fedora
    Vendor
    Hp
    Product
    Hp-ux
    Vendor
    Hp
    Product
    Openvms
    Vendor
    Hpe
    Product
    Dns
    Vendor
    Hpe
    Product
    J9668a
    Vendor
    Hpe
    Product
    J9669a
    Vendor
    Hpe
    Product
    J9672a
    Vendor
    Hpe
    Product
    Jc516a
    Vendor
    Hpe
    Product
    Jc517a
    Vendor
    Hpe
    Product
    Jc518a
    Vendor
    Hpe
    Product
    Jd023a
    Vendor
    Hpe
    Product
    Jd024a
    Vendor
    Hpe
    Product
    Jd025a
    Vendor
    Hpe
    Product
    Jd026a
    Vendor
    Hpe
    Product
    Jd027a
    Vendor
    Hpe
    Product
    Jd028a
    Vendor
    Hpe
    Product
    Jd029a
    Vendor
    Hpe
    Product
    Je252a
    Vendor
    Hpe
    Product
    Je253a
    Vendor
    Hpe
    Product
    Je254a
    Vendor
    Hpe
    Product
    Je340a
    Vendor
    Hpe
    Product
    Je341a
    Vendor
    Hpe
    Product
    Je342a
    Vendor
    Hpe
    Product
    Je355a
    Vendor
    Hpe
    Product
    Vcx
    Vendor
    Isc
    Product
    Bind
    Vendor
    Juniper
    Product
    J2300
    Vendor
    Juniper
    Product
    J2320
    Vendor
    Juniper
    Product
    J2350
    Vendor
    Juniper
    Product
    J4300
    Vendor
    Juniper
    Product
    J4350
    Vendor
    Juniper
    Product
    J4350 Nebs
    Vendor
    Juniper
    Product
    J6300
    Vendor
    Juniper
    Product
    J6350
    Vendor
    Juniper
    Product
    J635 Nebs
    Vendor
    Juniper
    Product
    Junos
    Vendor
    Juniper
    Product
    Jx-4bri
    Vendor
    Juniper
    Product
    Jx-4ct1e1
    Vendor
    Juniper
    Product
    Srx100
    Vendor
    Juniper
    Product
    Srx1400
    Vendor
    Juniper
    Product
    Srx1500
    Vendor
    Juniper
    Product
    Srx1600
    Vendor
    Juniper
    Product
    Srx2300
    Vendor
    Juniper
    Product
    Srx300
    Vendor
    Juniper
    Product
    Srx320
    Vendor
    Juniper
    Product
    Srx340
    Vendor
    Juniper
    Product
    Srx3400
    Vendor
    Juniper
    Product
    Srx345
    Vendor
    Juniper
    Product
    Srx3600
    Vendor
    Juniper
    Product
    Srx380
    Vendor
    Juniper
    Product
    Srx400
    Vendor
    Juniper
    Product
    Srx4100
    Vendor
    Juniper
    Product
    Srx4120
    Vendor
    Juniper
    Product
    Srx4200
    Vendor
    Juniper
    Product
    Srx4300
    Vendor
    Juniper
    Product
    Srx440
    Vendor
    Juniper
    Product
    Srx4600
    Vendor
    Juniper
    Product
    Srx4700
    Vendor
    Juniper
    Product
    Srx5400
    Vendor
    Juniper
    Product
    Srx550 Hm
    Vendor
    Juniper
    Product
    Srx5600
    Vendor
    Juniper
    Product
    Srx5800
    Vendor
    Juniper
    Product
    Srx650
    Vendor
    Netapp
    Product
    Clustered Data Ontap
    Vendor
    Opensuse
    Product
    Evergreen
    Vendor
    Opensuse
    Product
    Opensuse
    Vendor
    Oracle
    Product
    Solaris
    Vendor
    Oracle
    Product
    Vm Server
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Aus
    Vendor
    Redhat
    Product
    Rhel Aus
    Vendor
    Redhat
    Product
    Rhel Eus
    Vendor
    Suse
    Product
    Linux Enterprise Debuginfo
    Vendor
    Suse
    Product
    Linux Enterprise Desktop
    Vendor
    Suse
    Product
    Linux Enterprise Server
    Vendor
    Suse
    Product
    Linux Enterprise Software Development Kit

    Exploits

    https://www.exploit-db.com/exploits/37721/https://www.exploit-db.com/exploits/37721/https://www.exploit-db.com/exploits/37721https://github.com/elceef/tkeypochttps://github.com/hmlio/vaas-cve-2015-5477https://github.com/ilanyu/cve-2015-5477https://github.com/knqyf263/cve-2015-5477https://github.com/likekabin/ShareDoc_cve-2015-5477https://github.com/robertdavidgraham/cve-2015-5477https://github.com/xycloops123/TKEY-remote-DoS-vulnerability-exploithttps://www.exploit-db.com/exploits/37723

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2016-4694 (CVSS 9.1) — The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 a…
    CVE-2016-4754 (CVSS 7.5) — ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers …
    CVE-2015-1151 (CVSS 5) — Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activit…
    CVE-2015-1150 (CVSS 5) — The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, whic…
    CVE-2014-4447 (CVSS 1.9) — Profile Manager in Apple OS X Server before 4.0 allows local users to discover cleartext passwords by reading …
    CVE-2014-4446 (CVSS 2.1) — Mail Service in Apple OS X Server before 4.0 does not enforce SACL changes until after a service restart, whic…
    CVE-2014-3583 (CVSS 5) — The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 …
    CVE-2014-4406 (CVSS 6.1) — Cross-site scripting (XSS) vulnerability in Xcode Server in CoreCollaboration in Apple OS X Server before 3.2.…
    CVE-2014-4424 (CVSS 7.5) — SQL injection vulnerability in Wiki Server in CoreCollaboration in Apple OS X Server before 2.2.3 and 3.x befo…
    CVE-2013-5143 (CVSS 6.8) — The RADIUS service in Server App in Apple OS X Server before 3.0 selects a fallback X.509 certificate in unspe…

    References

    http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718
    http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html
    http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html
    http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html
    http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html
    http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html
    http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html
    http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html
    http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html
    http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html
    http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html
    http://marc.info/?l=bugtraq&m=144000632319155&w=2
    http://marc.info/?l=bugtraq&m=144017354030745&w=2
    http://marc.info/?l=bugtraq&m=144181171013996&w=2
    http://marc.info/?l=bugtraq&m=144294073801304&w=2
    http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html
    http://rhn.redhat.com/errata/RHSA-2015-1513.html
    http://rhn.redhat.com/errata/RHSA-2015-1514.html
    http://rhn.redhat.com/errata/RHSA-2015-1515.html
    http://rhn.redhat.com/errata/RHSA-2016-0078.html
    http://rhn.redhat.com/errata/RHSA-2016-0079.html
    http://www.debian.org/security/2015/dsa-3319
    http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
    http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
    http://www.securityfocus.com/bid/76092
    http://www.securitytracker.com/id/1033100
    http://www.ubuntu.com/usn/USN-2693-1
    https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415
    https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480
    https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918
    https://kb.isc.org/article/AA-01272
    https://kb.isc.org/article/AA-01305
    https://kb.isc.org/article/AA-01306
    https://kb.isc.org/article/AA-01307
    https://kb.isc.org/article/AA-01438
    https://kb.juniper.net/JSA10783
    https://kc.mcafee.com/corporate/index?page=content&id=SB10126
    https://security.gentoo.org/glsa/201510-01
    https://security.netapp.com/advisory/ntap-20160114-0001/
    https://support.apple.com/kb/HT205032
    https://www.exploit-db.com/exploits/37721/
    https://www.exploit-db.com/exploits/37723/
    http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718
    http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html
    http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html
    http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html
    http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html
    http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html
    http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html
    http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html
    http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html
    http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html
    http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html
    http://marc.info/?l=bugtraq&m=144000632319155&w=2
    http://marc.info/?l=bugtraq&m=144017354030745&w=2
    http://marc.info/?l=bugtraq&m=144181171013996&w=2
    http://marc.info/?l=bugtraq&m=144294073801304&w=2
    http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html
    http://rhn.redhat.com/errata/RHSA-2015-1513.html
    http://rhn.redhat.com/errata/RHSA-2015-1514.html
    http://rhn.redhat.com/errata/RHSA-2015-1515.html
    http://rhn.redhat.com/errata/RHSA-2016-0078.html
    http://rhn.redhat.com/errata/RHSA-2016-0079.html
    http://www.debian.org/security/2015/dsa-3319
    http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
    http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
    http://www.securityfocus.com/bid/76092
    http://www.securitytracker.com/id/1033100
    http://www.ubuntu.com/usn/USN-2693-1
    https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415
    https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480
    https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918
    https://kb.isc.org/article/AA-01272
    https://kb.isc.org/article/AA-01305
    https://kb.isc.org/article/AA-01306
    https://kb.isc.org/article/AA-01307
    https://kb.isc.org/article/AA-01438
    https://kb.juniper.net/JSA10783
    https://kc.mcafee.com/corporate/index?page=content&id=SB10126
    https://security.gentoo.org/glsa/201510-01
    https://security.netapp.com/advisory/ntap-20160114-0001/
    https://support.apple.com/kb/HT205032
    https://www.exploit-db.com/exploits/37721/
    https://www.exploit-db.com/exploits/37723/
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5477

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High