CVE-2015-5477
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
- CVSS 3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- 100% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-25)
- CISA KEV
- listed 2026-10-08, due 2026-10-11
- CWEs
- CWE-19, CWE-617
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:os_x_server
- canonical:ubuntu_linux
- debian:debian_linux
- fedoraproject:fedora
- hp:hp-ux
- hp:openvms
- hpe:dns
- hpe:vcx
- isc:bind
- juniper:junos
- netapp:clustered_data_ontap
- opensuse:evergreen
- opensuse:opensuse
- oracle:solaris
- oracle:vm_server
- redhat:enterprise_linux
- redhat:enterprise_linux_aus
- suse:linux_enterprise_debuginfo
- suse:linux_enterprise_desktop
- suse:linux_enterprise_server
- suse:linux_enterprise_software_development_kit
References
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718
- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html