CVE-2015-5477
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to...
CVE-2015-5477 is a high vulnerability (CVSS 7.8) in Isc Bind, published July 28, 2015. CISA lists it as known to be exploited, since October 8, 2026. EUVD reports exploitation since October 8, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 99.6%, the 99th percentile. Fixed in bind9 1:9.9.5.dfsg-11.
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
Exploit likelihood
What each source reports
CVE List
7.5
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
- Record
CVE-2015-5477- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-617
- Updated
- 2026-11-02
EUVDEUVD-2015-5432
7.5
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
- Record
EUVD-2015-5432- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-4622-vjcx-p39j
7.5
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to...
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
- Record
GHSA-4622-vjcx-p39j- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-617
- Updated
- 2026-11-02
CISA KEV No score
ISC BIND Data Processing Errors Vulnerability
ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.
- Record
CVE-2015-5477- Weakness
- CWE-19
- Updated
- 2026-11-02
NVD
7.5
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
- Record
CVE-2015-5477- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-19, CWE-617
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2015-5477
7.5
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
- Record
DEBIAN-CVE-2015-5477- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 8 moreShow less
OSVUBUNTU-CVE-2015-5477
7.5
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
- Record
UBUNTU-CVE-2015-5477- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV No score
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
- Record
CVE-2015-5477- Updated
- 2026-11-02
OSVMGASA-2015-0298 No score
Updated bind package fixes security vulnerability
An error in the handling of TKEY queries can be exploited by an attacker for use as a denial-of-service vector, as a constructed packet can use the defect to trigger a REQUIRE assertion failure, causing BIND to exit (CVE-2015-5477).
- Record
MGASA-2015-0298- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10467-1 No score
bind-9.10.3P4-21.1 on GA media
These are all security issues fixed in the bind-9.10.3P4-21.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10467-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1304-1 No score
Security update for bind
bind was updated to fix one security issue.
This security issue was fixed:
- CVE-2015-5477: Remote DoS via TKEY queries (bsc#939567)
Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet handling.
- Record
SUSE-SU-2015:1304-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1305-1 No score
Security update for bind
bind was updated to fix one security issue.
This security issue was fixed:
- CVE-2015-5477: Remote DoS via TKEY queries (bsc#939567)
Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet handling.
- Record
SUSE-SU-2015:1305-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1316-1 No score
Security update for bind
bind was updated to fix one security issue.
This security issue was fixed:
- CVE-2015-5477: Remote DoS via TKEY queries (bsc#939567)
Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet handling.
- Record
SUSE-SU-2015:1316-1- Updated
- 2026-11-02
OSVUSN-2693-1 No score
bind9 vulnerabilities
Jonathan Foote discovered that Bind incorrectly handled certain TKEY queries. A remote attacker could use this issue with a specially crafted packet to cause Bind to crash, resulting in a denial of service. (CVE-2015-5477)
Pories Ediansyah discovered that Bind incorrectly handled certain configurations involving DNS64. A remote attacker could use this issue with a specially crafted query to cause Bind to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. (CVE-2012-5689)
- Record
USN-2693-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bind9Debian:12 |
before 1:9.9.5.dfsg-11 | 1:9.9.5.dfsg-11 |
bind9Debian:13 |
before 1:9.9.5.dfsg-11 | 1:9.9.5.dfsg-11 |
bind9Debian:14 |
before 1:9.9.5.dfsg-11 | 1:9.9.5.dfsg-11 |
bind9Debian:6.0 |
before 1:9.7.3.dfsg-1~squeeze16, plus listed versions 1:9.7.2.dfsg.P3-1.11:9.7.3.dfsg-1~squeeze11:9.7.3.dfsg-1~squeeze101:9.7.3.dfsg-1~squeeze111:9.7.3.dfsg-1~squeeze12 Show 14 moreShow less1:9.7.3.dfsg-1~squeeze131:9.7.3.dfsg-1~squeeze141:9.7.3.dfsg-1~squeeze151:9.7.3.dfsg-1~squeeze1~bpo50+11:9.7.3.dfsg-1~squeeze21:9.7.3.dfsg-1~squeeze2~bpo50+11:9.7.3.dfsg-1~squeeze31:9.7.3.dfsg-1~squeeze3~bpo50+11:9.7.3.dfsg-1~squeeze41:9.7.3.dfsg-1~squeeze51:9.7.3.dfsg-1~squeeze61:9.7.3.dfsg-1~squeeze71:9.7.3.dfsg-1~squeeze81:9.7.3.dfsg-1~squeeze9 |
1:9.7.3.dfsg-1~squeeze16 |
bind9Debian:7 |
before 1:9.8.4.dfsg.P1-6+nmu2+deb7u6, plus listed versions 1:9.8.4.dfsg.P1-6+nmu21:9.8.4.dfsg.P1-6+nmu2+deb7u11:9.8.4.dfsg.P1-6+nmu2+deb7u1~bpo60+11:9.8.4.dfsg.P1-6+nmu2+deb7u21:9.8.4.dfsg.P1-6+nmu2+deb7u2~bpo60+11:9.8.4.dfsg.P1-6+nmu2+deb7u31:9.8.4.dfsg.P1-6+nmu2+deb7u41:9.8.4.dfsg.P1-6+nmu2+deb7u5 |
1:9.8.4.dfsg.P1-6+nmu2+deb7u6 |
bind9Debian:8 |
before 1:9.9.5.dfsg-9+deb8u2, plus listed versions 1:9.9.5.dfsg-91:9.9.5.dfsg-9+deb8u1 |
1:9.9.5.dfsg-9+deb8u2 |
bindMageia:4 |
before 9.9.7.P2-1.mga4 | 9.9.7.P2-1.mga4 |
bindMageia:5 |
before 9.10.2.P3-1.mga5 | 9.10.2.P3-1.mga5 |
bindRed Hat:enterprise_linux:6::client |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-debuginfoRed Hat:enterprise_linux:6::client |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
Show 148 moreShow less
| Package | Affected | Fixed |
|---|---|---|
bind-libsRed Hat:enterprise_linux:6::client |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-utilsRed Hat:enterprise_linux:6::client |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-chrootRed Hat:enterprise_linux:6::client |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-develRed Hat:enterprise_linux:6::client |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-sdbRed Hat:enterprise_linux:6::client |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bindRed Hat:enterprise_linux:6::computenode |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-debuginfoRed Hat:enterprise_linux:6::computenode |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-libsRed Hat:enterprise_linux:6::computenode |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-utilsRed Hat:enterprise_linux:6::computenode |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-chrootRed Hat:enterprise_linux:6::computenode |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-develRed Hat:enterprise_linux:6::computenode |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-sdbRed Hat:enterprise_linux:6::computenode |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bindRed Hat:enterprise_linux:6::server |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-chrootRed Hat:enterprise_linux:6::server |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-debuginfoRed Hat:enterprise_linux:6::server |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-libsRed Hat:enterprise_linux:6::server |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-utilsRed Hat:enterprise_linux:6::server |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-develRed Hat:enterprise_linux:6::server |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-sdbRed Hat:enterprise_linux:6::server |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bindRed Hat:enterprise_linux:6::workstation |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-chrootRed Hat:enterprise_linux:6::workstation |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-debuginfoRed Hat:enterprise_linux:6::workstation |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-libsRed Hat:enterprise_linux:6::workstation |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-utilsRed Hat:enterprise_linux:6::workstation |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-develRed Hat:enterprise_linux:6::workstation |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bind-sdbRed Hat:enterprise_linux:6::workstation |
before 32:9.8.2-0.37.rc1.el6_7.2 | 32:9.8.2-0.37.rc1.el6_7.2 |
bindRed Hat:enterprise_linux:7::client |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-debuginfoRed Hat:enterprise_linux:7::client |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-libsRed Hat:enterprise_linux:7::client |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-libs-liteRed Hat:enterprise_linux:7::client |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-licenseRed Hat:enterprise_linux:7::client |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-utilsRed Hat:enterprise_linux:7::client |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-chrootRed Hat:enterprise_linux:7::client |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-develRed Hat:enterprise_linux:7::client |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-lite-develRed Hat:enterprise_linux:7::client |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-sdbRed Hat:enterprise_linux:7::client |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-sdb-chrootRed Hat:enterprise_linux:7::client |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bindRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-debuginfoRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-libsRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-libs-liteRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-licenseRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-utilsRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-chrootRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-develRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-lite-develRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-sdbRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-sdb-chrootRed Hat:enterprise_linux:7::computenode |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bindRed Hat:enterprise_linux:7::server |
before 32:9.9.4-18.ael7b_1.3 | 32:9.9.4-18.ael7b_1.3 |
bind-chrootRed Hat:enterprise_linux:7::server |
before 32:9.9.4-18.ael7b_1.3 | 32:9.9.4-18.ael7b_1.3 |
bind-debuginfoRed Hat:enterprise_linux:7::server |
before 32:9.9.4-18.ael7b_1.3 | 32:9.9.4-18.ael7b_1.3 |
bind-libsRed Hat:enterprise_linux:7::server |
before 32:9.9.4-18.ael7b_1.3 | 32:9.9.4-18.ael7b_1.3 |
bind-libs-liteRed Hat:enterprise_linux:7::server |
before 32:9.9.4-18.ael7b_1.3 | 32:9.9.4-18.ael7b_1.3 |
bind-licenseRed Hat:enterprise_linux:7::server |
before 32:9.9.4-18.ael7b_1.3 | 32:9.9.4-18.ael7b_1.3 |
bind-utilsRed Hat:enterprise_linux:7::server |
before 32:9.9.4-18.ael7b_1.3 | 32:9.9.4-18.ael7b_1.3 |
bind-develRed Hat:enterprise_linux:7::server |
before 32:9.9.4-18.ael7b_1.3 | 32:9.9.4-18.ael7b_1.3 |
bind-lite-develRed Hat:enterprise_linux:7::server |
before 32:9.9.4-18.ael7b_1.3 | 32:9.9.4-18.ael7b_1.3 |
bind-sdbRed Hat:enterprise_linux:7::server |
before 32:9.9.4-18.ael7b_1.3 | 32:9.9.4-18.ael7b_1.3 |
bind-sdb-chrootRed Hat:enterprise_linux:7::server |
before 32:9.9.4-18.ael7b_1.3 | 32:9.9.4-18.ael7b_1.3 |
bindRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-chrootRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-debuginfoRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-libsRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-libs-liteRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-licenseRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-utilsRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-develRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-lite-develRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-sdbRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bind-sdb-chrootRed Hat:enterprise_linux:7::workstation |
before 32:9.9.4-18.el7_1.3 | 32:9.9.4-18.el7_1.3 |
bindRed Hat:enterprise_linux:5::client |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bind-debuginfoRed Hat:enterprise_linux:5::client |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bind-libsRed Hat:enterprise_linux:5::client |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bind-sdbRed Hat:enterprise_linux:5::client |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bind-utilsRed Hat:enterprise_linux:5::client |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bindRed Hat:enterprise_linux:5::client_workstation |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bind-chrootRed Hat:enterprise_linux:5::client_workstation |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bind-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bind-develRed Hat:enterprise_linux:5::client_workstation |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bind-libbind-develRed Hat:enterprise_linux:5::client_workstation |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
caching-nameserverRed Hat:enterprise_linux:5::client_workstation |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bindRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bind-chrootRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bind-debuginfoRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bind-develRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bind-libbind-develRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bind-libsRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bind-sdbRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bind-utilsRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
caching-nameserverRed Hat:enterprise_linux:5::server |
before 30:9.3.6-25.P1.el5_11.3 | 30:9.3.6-25.P1.el5_11.3 |
bind97Red Hat:enterprise_linux:5::client_workstation |
before 32:9.7.0-21.P2.el5_11.2 | 32:9.7.0-21.P2.el5_11.2 |
bind97-chrootRed Hat:enterprise_linux:5::client_workstation |
before 32:9.7.0-21.P2.el5_11.2 | 32:9.7.0-21.P2.el5_11.2 |
bind97-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 32:9.7.0-21.P2.el5_11.2 | 32:9.7.0-21.P2.el5_11.2 |
bind97-develRed Hat:enterprise_linux:5::client_workstation |
before 32:9.7.0-21.P2.el5_11.2 | 32:9.7.0-21.P2.el5_11.2 |
bind97-libsRed Hat:enterprise_linux:5::client_workstation |
before 32:9.7.0-21.P2.el5_11.2 | 32:9.7.0-21.P2.el5_11.2 |
bind97-utilsRed Hat:enterprise_linux:5::client_workstation |
before 32:9.7.0-21.P2.el5_11.2 | 32:9.7.0-21.P2.el5_11.2 |
bind97Red Hat:enterprise_linux:5::server |
before 32:9.7.0-21.P2.el5_11.2 | 32:9.7.0-21.P2.el5_11.2 |
bind97-chrootRed Hat:enterprise_linux:5::server |
before 32:9.7.0-21.P2.el5_11.2 | 32:9.7.0-21.P2.el5_11.2 |
bind97-debuginfoRed Hat:enterprise_linux:5::server |
before 32:9.7.0-21.P2.el5_11.2 | 32:9.7.0-21.P2.el5_11.2 |
bind97-develRed Hat:enterprise_linux:5::server |
before 32:9.7.0-21.P2.el5_11.2 | 32:9.7.0-21.P2.el5_11.2 |
bind97-libsRed Hat:enterprise_linux:5::server |
before 32:9.7.0-21.P2.el5_11.2 | 32:9.7.0-21.P2.el5_11.2 |
bind97-utilsRed Hat:enterprise_linux:5::server |
before 32:9.7.0-21.P2.el5_11.2 | 32:9.7.0-21.P2.el5_11.2 |
bindRed Hat:rhel_aus:6.4::server |
before 32:9.8.2-0.17.rc1.el6_4.7 | 32:9.8.2-0.17.rc1.el6_4.7 |
bind-chrootRed Hat:rhel_aus:6.4::server |
before 32:9.8.2-0.17.rc1.el6_4.7 | 32:9.8.2-0.17.rc1.el6_4.7 |
bind-debuginfoRed Hat:rhel_aus:6.4::server |
before 32:9.8.2-0.17.rc1.el6_4.7 | 32:9.8.2-0.17.rc1.el6_4.7 |
bind-libsRed Hat:rhel_aus:6.4::server |
before 32:9.8.2-0.17.rc1.el6_4.7 | 32:9.8.2-0.17.rc1.el6_4.7 |
bind-utilsRed Hat:rhel_aus:6.4::server |
before 32:9.8.2-0.17.rc1.el6_4.7 | 32:9.8.2-0.17.rc1.el6_4.7 |
bindRed Hat:rhel_aus:6.5::server |
before 32:9.8.2-0.23.rc1.el6_5.2 | 32:9.8.2-0.23.rc1.el6_5.2 |
bind-chrootRed Hat:rhel_aus:6.5::server |
before 32:9.8.2-0.23.rc1.el6_5.2 | 32:9.8.2-0.23.rc1.el6_5.2 |
bind-debuginfoRed Hat:rhel_aus:6.5::server |
before 32:9.8.2-0.23.rc1.el6_5.2 | 32:9.8.2-0.23.rc1.el6_5.2 |
bind-libsRed Hat:rhel_aus:6.5::server |
before 32:9.8.2-0.23.rc1.el6_5.2 | 32:9.8.2-0.23.rc1.el6_5.2 |
bind-utilsRed Hat:rhel_aus:6.5::server |
before 32:9.8.2-0.23.rc1.el6_5.2 | 32:9.8.2-0.23.rc1.el6_5.2 |
bind-develRed Hat:rhel_aus:6.4::server |
before 32:9.8.2-0.17.rc1.el6_4.7 | 32:9.8.2-0.17.rc1.el6_4.7 |
bind-sdbRed Hat:rhel_aus:6.4::server |
before 32:9.8.2-0.17.rc1.el6_4.7 | 32:9.8.2-0.17.rc1.el6_4.7 |
bind-develRed Hat:rhel_aus:6.5::server |
before 32:9.8.2-0.23.rc1.el6_5.2 | 32:9.8.2-0.23.rc1.el6_5.2 |
bind-sdbRed Hat:rhel_aus:6.5::server |
before 32:9.8.2-0.23.rc1.el6_5.2 | 32:9.8.2-0.23.rc1.el6_5.2 |
bindRed Hat:rhel_eus:6.6::computenode |
before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-debuginfoRed Hat:rhel_eus:6.6::computenode |
before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-libsRed Hat:rhel_eus:6.6::computenode |
before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-utilsRed Hat:rhel_eus:6.6::computenode |
before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-chrootRed Hat:rhel_eus:6.6::computenode |
before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-develRed Hat:rhel_eus:6.6::computenode |
before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-sdbRed Hat:rhel_eus:6.6::computenode |
before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bindRed Hat:rhel_eus:6.6::server |
before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-chrootRed Hat:rhel_eus:6.6::server |
before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-debuginfoRed Hat:rhel_eus:6.6::server |
before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-libsRed Hat:rhel_eus:6.6::server |
before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-utilsRed Hat:rhel_eus:6.6::server |
before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-develRed Hat:rhel_eus:6.6::server |
before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bind-sdbRed Hat:rhel_eus:6.6::server |
before 32:9.8.2-0.30.rc1.el6_6.4 | 32:9.8.2-0.30.rc1.el6_6.4 |
bindSUSE:Linux Enterprise Software Development Kit 11 SP3 |
before 9.9.6P1-0.12.1 | 9.9.6P1-0.12.1 |
bindSUSE:Linux Enterprise Software Development Kit 11 SP4 |
before 9.9.6P1-0.12.1 | 9.9.6P1-0.12.1 |
bindSUSE:Linux Enterprise Desktop 11 SP3 |
before 9.9.6P1-0.12.1 | 9.9.6P1-0.12.1 |
bindSUSE:Linux Enterprise Desktop 11 SP4 |
before 9.9.6P1-0.12.1 | 9.9.6P1-0.12.1 |
bindSUSE:Linux Enterprise Server 11 SP2-LTSS |
before 9.9.6P1-0.12.1 | 9.9.6P1-0.12.1 |
bindSUSE:Linux Enterprise Server 11 SP3 |
before 9.9.6P1-0.12.1 | 9.9.6P1-0.12.1 |
bindSUSE:Linux Enterprise Server 11 SP3-TERADATA |
before 9.9.6P1-0.12.1 | 9.9.6P1-0.12.1 |
bindSUSE:Linux Enterprise Server for SAP Applications 11 SP3 |
before 9.9.6P1-0.12.1 | 9.9.6P1-0.12.1 |
bindSUSE:Linux Enterprise Server 11 SP4 |
before 9.9.6P1-0.12.1 | 9.9.6P1-0.12.1 |
bindSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 9.9.6P1-0.12.1 | 9.9.6P1-0.12.1 |
bindSUSE:Linux Enterprise Desktop 12 |
before 9.9.6P1-23.1 | 9.9.6P1-23.1 |
bindSUSE:Linux Enterprise Software Development Kit 12 |
before 9.9.6P1-23.1 | 9.9.6P1-23.1 |
bindSUSE:Linux Enterprise Server 12 |
before 9.9.6P1-23.1 | 9.9.6P1-23.1 |
bindSUSE:Linux Enterprise Server for SAP Applications 12 |
before 9.9.6P1-23.1 | 9.9.6P1-23.1 |
bindSUSE:Linux Enterprise Server 11 SP1-LTSS |
before 9.6ESVR11W1-0.6.1 | 9.6ESVR11W1-0.6.1 |
bindSUSE:Linux Enterprise Server 11 SP1-TERADATA |
before 9.6ESVR11W1-0.6.1 | 9.6ESVR11W1-0.6.1 |
bind9Ubuntu:14.04:LTS |
before 1:9.9.5.dfsg-3ubuntu0.4, plus listed versions 1:9.9.3.dfsg.P2-4ubuntu11:9.9.3.dfsg.P2-4ubuntu21:9.9.3.dfsg.P2-4ubuntu31:9.9.5.dfsg-21:9.9.5.dfsg-31:9.9.5.dfsg-3ubuntu0.11:9.9.5.dfsg-3ubuntu0.21:9.9.5.dfsg-3ubuntu0.3 |
1:9.9.5.dfsg-3ubuntu0.4 |
bindopenSUSE:Tumbleweed |
before 9.10.3P4-21.1 | 9.10.3P4-21.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | robertdavidgraham/cve-2015-5477 | 2015-07-31 |
| Exploit-DB | ISC BIND 9 - TKEY (PoC) | 2015-08-01 |
| PoC in GitHub | elceef/tkeypoc | 2015-08-01 |
| PoC in GitHub | hmlio/vaas-cve-2015-5477 | 2015-08-04 |
| Exploit-DB | ISC BIND 9 - TKEY Remote Denial of Service (PoC) | 2015-08-05 |
| PoC in GitHub | knqyf263/cve-2015-5477 | 2015-08-09 |
| PoC in GitHub | ilanyu/cve-2015-5477 | 2015-08-19 |
| PoC in GitHub | likekabin/ShareDoc_cve-2015-5477 | 2018-07-17 |
| PoC in GitHub | xycloops123/TKEY-remote-DoS-vulnerability-exploit | 2020-05-11 |
| Metasploit | BIND TKEY Query Denial of Service | 2015-07-28 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | exploitation, exploits | |
| 2026-11-03 | exploits | |
| 2026-11-02 | created | CVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, NVD, OSV, PoC in GitHub |
References
packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html
oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415
kb.juniper.net/JSA10783
rhn.redhat.com/errata/RHSA-2015-1513.html
Show 122 moreShow less
lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html
security.netapp.com/advisory/ntap-20160114-0001
kb.isc.org/article/AA-01438
lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html
marc.info?l=bugtraq&m=144017354030745&w=2
marc.info?l=bugtraq&m=144294073801304&w=2
rhn.redhat.com/errata/RHSA-2016-0079.html
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918
oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
kb.juniper.net/InfoCenter/index?page=content&id=JSA10718
rhn.redhat.com/errata/RHSA-2015-1514.html
ubuntu.com/usn/USN-2693-1
support.apple.com/kb/HT205032
securitytracker.com/id/1033100
kb.isc.org/article/AA-01307
securityfocus.com/bid/76092
lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html
lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html
exploit-db.com/exploits/37721
rhn.redhat.com/errata/RHSA-2015-1515.html
lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html
security.gentoo.org/glsa/201510-01
lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html
marc.info?l=bugtraq&m=144181171013996&w=2
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480
debian.org/security/2015/dsa-3319
lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html
marc.info?l=bugtraq&m=144000632319155&w=2
lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html
exploit-db.com/exploits/37723
kb.isc.org/article/AA-01305
rhn.redhat.com/errata/RHSA-2016-0078.html
lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html
kb.isc.org/article/AA-01306
kc.mcafee.com/corporate/index?page=content&id=SB10126
kb.isc.org/article/AA-01272
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5477
nvd.nist.gov/vuln/detail/CVE-2015-5477
github.com/advisories/GHSA-4622-vjcx-p39j
security-tracker.debian.org/tracker/CVE-2015-5477
advisories.mageia.org/MGASA-2015-0298.html
bugs.mageia.org/show_bug.cgi?id=16496
kb.isc.org/article/AA-01279
kb.isc.org/article/AA-01280
access.redhat.com/errata/RHSA-2015:1513
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1247361
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1513.json
access.redhat.com/security/cve/CVE-2015-5477
cve.org/CVERecord?id=CVE-2015-5477
access.redhat.com/solutions/1548963
cisa.gov/known-exploited-vulnerabilities-catalog
access.redhat.com/errata/RHSA-2015:1514
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1514.json
access.redhat.com/errata/RHSA-2015:1515
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1515.json
access.redhat.com/errata/RHSA-2016:0078
kb.isc.org/article/AA-01216
kb.isc.org/article/AA-01287
kb.isc.org/article/AA-01317
bugzilla.redhat.com/show_bug.cgi?id=1259087
bugzilla.redhat.com/show_bug.cgi?id=1171912
bugzilla.redhat.com/show_bug.cgi?id=1291176
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0078.json
access.redhat.com/security/cve/CVE-2014-8500
cve.org/CVERecord?id=CVE-2014-8500
nvd.nist.gov/vuln/detail/CVE-2014-8500
kb.isc.org/article/AA-01216/74/CVE-2014-8500%3A-A-Defect-in-Delegation-Handling-Can-Be-Exploited-to-Crash-BIND.html
access.redhat.com/security/cve/CVE-2015-5722
cve.org/CVERecord?id=CVE-2015-5722
nvd.nist.gov/vuln/detail/CVE-2015-5722
kb.isc.org/article/AA-01287/0
access.redhat.com/security/cve/CVE-2015-8000
cve.org/CVERecord?id=CVE-2015-8000
nvd.nist.gov/vuln/detail/CVE-2015-8000
access.redhat.com/errata/RHSA-2016:0079
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0079.json
suse.com/support/update/announcement/2015/suse-su-20151304-1
bugzilla.suse.com/939567
suse.com/security/cve/CVE-2015-5477
suse.com/support/update/announcement/2015/suse-su-20151305-1
suse.com/support/update/announcement/2015/suse-su-20151316-1
ubuntu.com/security/CVE-2015-5477
kb.isc.org/article/AA-01272/0
ubuntu.com/security/notices/USN-2693-1
ubuntu.com/security/CVE-2012-5689
suse.com/security/cve/CVE-2009-0696
suse.com/security/cve/CVE-2009-4022
suse.com/security/cve/CVE-2010-3613
suse.com/security/cve/CVE-2010-3614
suse.com/security/cve/CVE-2010-3615
suse.com/security/cve/CVE-2011-0414
suse.com/security/cve/CVE-2011-1907
suse.com/security/cve/CVE-2011-1910
suse.com/security/cve/CVE-2011-2464
suse.com/security/cve/CVE-2011-4313
suse.com/security/cve/CVE-2012-1667
suse.com/security/cve/CVE-2012-3817
suse.com/security/cve/CVE-2012-3868
suse.com/security/cve/CVE-2012-4244
suse.com/security/cve/CVE-2012-5166
suse.com/security/cve/CVE-2012-5688
suse.com/security/cve/CVE-2012-5689
suse.com/security/cve/CVE-2013-2266
suse.com/security/cve/CVE-2013-4854
suse.com/security/cve/CVE-2014-0591
suse.com/security/cve/CVE-2014-3214
suse.com/security/cve/CVE-2014-3859
suse.com/security/cve/CVE-2014-8500
suse.com/security/cve/CVE-2014-8680
suse.com/security/cve/CVE-2015-1349
suse.com/security/cve/CVE-2015-4620
suse.com/security/cve/CVE-2015-5722
suse.com/security/cve/CVE-2015-5986
suse.com/security/cve/CVE-2015-8000
suse.com/security/cve/CVE-2015-8704
suse.com/security/cve/CVE-2015-8705
suse.com/security/cve/CVE-2016-1285
suse.com/security/cve/CVE-2016-1286
suse.com/security/cve/CVE-2016-2088
suse.com/security/cve/CVE-2016-2776
suse.com/security/cve/CVE-2016-8864