peter bassill · operator
$ cve CVE-2015-5477 JSON

CVE-2015-5477 KEV EXPLOIT

7.5
HIGH · CVSS 3.1 · EPSS 99.6% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2026-10-11.

Description

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

Scoring

CVSS7.5 (HIGH, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS99.58% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-19
On CISA KEVyes — remediate by 2026-10-11
Public exploityes
Published2015-07-29
Last modified2026-11-03

CISA KEV

Name ISC BIND Data Processing Errors Vulnerability
Added2026-10-08
Due2026-10-11
Vendor / productISC / BIND
Ransomware usenone reported

Affected (41)

VendorProduct
fedoraprojectfedora
iscbind
juniperj2300
juniperj2320
juniperj2350
juniperj4300
juniperj4350
juniperj4350 nebs
juniperj6300
juniperj635 nebs
juniperj6350
juniperjunos
juniperjx-4bri
juniperjx-4ct1e1
junipersrx100
junipersrx1400
junipersrx1500
junipersrx1600
junipersrx2300
junipersrx300
junipersrx320
junipersrx340
junipersrx3400
junipersrx345
junipersrx3600
junipersrx380
junipersrx400
junipersrx4100
junipersrx4120
junipersrx4200
junipersrx4300
junipersrx440
junipersrx4600
junipersrx4700
junipersrx5400
junipersrx550 hm
junipersrx5600
junipersrx5800
junipersrx650
redhatenterprise linux
redhatenterprise linux aus

Public exploits

SourceTitleDate
exploit-dbISC BIND 9 - TKEY Remote Denial of Service (PoC)2015-08-05
exploit-dbISC BIND 9 - TKEY (PoC)2015-08-01

References

→ the Explorer  ·  watch your stack  ·  NVD