CVE-2015-5477

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.

CISA Known Exploited Vulnerability

Vendor / Product ISC — BIND
Date Added 2026-10-08
Remediation Due 2026-10-11
This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272 ; https://access.redhat.com/errata/RHSA-2015:1513.html; https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-5477

Weakness Classification (2)

Affected Software (154)

VendorProductVersion
apple os_x_server 4.1.5
canonical ubuntu_linux 12.04
debian debian_linux 7.0
debian debian_linux 8.0
fedoraproject fedora 21
fedoraproject fedora 22
hp hp-ux 11.11
hp hp-ux 11.23
hp hp-ux 11.31
hp openvms 5.7
hpe dns 9.2.3
hpe dns 9.3
hpe vcx < 9.8.18
isc bind 9.1.0 – 9.9.7
isc bind 9.10.0 – 9.10.2
isc bind 9.10.2
juniper junos < 12.1
juniper junos 13.1 – 13.2
juniper junos 12.1
juniper junos 12.1
juniper junos 12.1r
juniper junos 12.1x44
juniper junos 12.1x44
juniper junos 12.1x44
juniper junos 12.1x44
juniper junos 12.1x44
juniper junos 12.1x44
juniper junos 12.1x44
juniper junos 12.1x44
juniper junos 12.1x44
Showing 30 of 154 entries

References & Advisories (43)

https://www.exploit-db.com/exploits/37723/
Third Party Advisory VDB Entry
https://kb.juniper.net/JSA10783
Third Party Advisory
https://kb.isc.org/article/AA-01272
Patch Vendor Advisory Broken Link
Showing 25 of 43 references

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →