{"id":"CVE-2015-5477","url":"https://www.cyber-defence.io/tools/cve/CVE-2015-5477","generatedAt":"2026-10-28T03:22:24.939Z","title":" ISC BIND Data Processing Errors Vulnerability","description":"named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.","published":"2015-07-29T14:59:05.000Z","lastModified":"2026-10-09T19:12:38.000Z","status":"Analyzed","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-19","CWE-617"],"affected":["juniper/junos","fedoraproject/fedora","redhat/enterprise linux","redhat/enterprise linux aus","debian/debian linux","oracle/vm server","oracle/solaris","hp/hp-ux","canonical/ubuntu linux","netapp/clustered data ontap","apple/os x server","hpe/dns","hp/openvms","hpe/vcx","suse/linux enterprise debuginfo","opensuse/evergreen","opensuse/opensuse","suse/linux enterprise desktop","suse/linux enterprise server","suse/linux enterprise software development kit","isc/bind"],"epss":{"score":0.99584,"percentile":0.99946,"date":"2026-10-26","history":[{"date":"2026-10-10","score":0.99409,"percentile":0.99941}]},"kev":{"listed":true,"dateAdded":"2026-10-08","dueDate":"2026-10-11","knownRansomwareCampaignUse":"Unknown","notes":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.\nThis vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272 ; https://access.redhat.com/errata/RHSA-2015:1513.html; https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-5477"},"exploits":{"count":2,"verified":true,"firstPublished":"2015-08-01","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":37723,"kind":"exploit","title":"ISC BIND 9 - TKEY Remote Denial of Service (PoC)","url":"https://www.exploit-db.com/exploits/37723","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/37723.py","file":"exploits/multiple/dos/37723.py","published":"2015-08-05","added":"2015-08-05","updated":"2018-01-11","author":"elceef","type":"dos","platform":"multiple","port":null,"verified":false,"codes":["CVE-2015-5477","OSVDB-125438"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null},{"edbId":37721,"kind":"exploit","title":"ISC BIND 9 - TKEY (PoC)","url":"https://www.exploit-db.com/exploits/37721","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/37721.c","file":"exploits/multiple/dos/37721.c","published":"2015-08-01","added":"2015-08-01","updated":"2017-09-18","author":"Errata Security","type":"dos","platform":"multiple","port":null,"verified":true,"codes":["CVE-2015-5477"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://github.com/robertdavidgraham/cve-2015-5477/blob/34137c71a7fb4e3fa894b045583e67d7b46d62cc/tkill.c"}]},"verdict":{"level":"urgent","text":"Known to be exploited in the wild (CISA KEV, CISA remediation deadline 11 October 2026). Treat as an emergency change: patch or isolate now, then hunt for prior compromise."},"changes":[{"kind":"epss","label":"EPSS jump","at":"2026-10-10T00:00:00.000Z","detail":{"to":0.99409,"from":0.91807,"percentile":0.99941},"summary":"EPSS moved from 91.8% to 99.4% probability of exploitation in the next thirty days."},{"kind":"kev","label":"Added to KEV","at":"2026-10-08T00:00:00.000Z","detail":{"name":" ISC BIND Data Processing Errors Vulnerability","vendor":"ISC","dueDate":"2026-10-11","product":"BIND","ransomware":"Unknown"},"summary":"Added to CISA KEV — known to be exploited; federal remediation due 2026-10-11."}],"references":[{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718","tags":["Mitigation","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=144000632319155&w=2","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=144017354030745&w=2","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=144181171013996&w=2","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=144294073801304&w=2","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1513.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1514.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1515.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0078.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0079.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2015/dsa-3319","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/76092","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1033100","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2693-1","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://kb.isc.org/article/AA-01272","tags":["Patch","Vendor Advisory","Broken Link"],"source":"cve@mitre.org"},{"url":"https://kb.isc.org/article/AA-01305","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"https://kb.isc.org/article/AA-01306","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"https://kb.isc.org/article/AA-01307","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"https://kb.isc.org/article/AA-01438","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"https://kb.juniper.net/JSA10783","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10126","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201510-01","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://security.netapp.com/advisory/ntap-20160114-0001/","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://support.apple.com/kb/HT205032","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/37721/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/37723/","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718","tags":["Mitigation","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144000632319155&w=2","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144017354030745&w=2","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144181171013996&w=2","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=144294073801304&w=2","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1513.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1514.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-5477","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}