CVE-2015-5477

KEV
Published: Lug 29, 2015 Last Modified: Mag 06, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,8
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: none
Integrity: none
Availability: complete

Description

AI Translation Available

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,9275
Percentile
1,0th
Updated

EPSS Score Trend (Last 75 Days)

Exploit

ISC BIND 9 - TKEY (PoC)

Verified

ISC BIND 9 - TKEY (PoC)

Author: Errata Security Published: Status: Verified
View Exploit Code →
Exploit

ISC BIND 9 - TKEY Remote Denial of …

ISC BIND 9 - TKEY Remote Denial of Service (PoC)

Author: elceef Published:
View Exploit Code →
Application

Bind by Isc

Product Information
Vendor Isc
Product Bind
Version Range Affected
To 9.9.7 (inclusive)
cpe:2.3:a:isc:bind:*:p1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Bind by Isc

Product Information
Vendor Isc
Product Bind
Version Range Affected
To 9.10.2 (inclusive)
cpe:2.3:a:isc:bind:*:p2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA1…
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718
http://lists.fedoraproject.org/pipermail/package-announce/2…
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.ht…
http://lists.fedoraproject.org/pipermail/package-announce/2…
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.ht…
http://lists.fedoraproject.org/pipermail/package-announce/2…
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.ht…
http://lists.opensuse.org/opensuse-security-announce/2015-0…
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html
http://lists.opensuse.org/opensuse-security-announce/2015-0…
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html
http://lists.opensuse.org/opensuse-security-announce/2015-0…
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html
http://lists.opensuse.org/opensuse-security-announce/2015-0…
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html
http://lists.opensuse.org/opensuse-security-announce/2015-0…
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html
http://lists.opensuse.org/opensuse-security-announce/2015-0…
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2016-0…
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html
http://marc.info/?l=bugtraq&m=144000632319155&w=2
http://marc.info/?l=bugtraq&m=144000632319155&w=2
http://marc.info/?l=bugtraq&m=144017354030745&w=2
http://marc.info/?l=bugtraq&m=144017354030745&w=2
http://marc.info/?l=bugtraq&m=144181171013996&w=2
http://marc.info/?l=bugtraq&m=144181171013996&w=2
http://marc.info/?l=bugtraq&m=144294073801304&w=2
http://marc.info/?l=bugtraq&m=144294073801304&w=2
http://packetstormsecurity.com/files/132926/BIND-TKEY-Query…
http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.h…
http://rhn.redhat.com/errata/RHSA-2015-1513.html
http://rhn.redhat.com/errata/RHSA-2015-1513.html
http://rhn.redhat.com/errata/RHSA-2015-1514.html
http://rhn.redhat.com/errata/RHSA-2015-1514.html
http://rhn.redhat.com/errata/RHSA-2015-1515.html
http://rhn.redhat.com/errata/RHSA-2015-1515.html
http://rhn.redhat.com/errata/RHSA-2016-0078.html
http://rhn.redhat.com/errata/RHSA-2016-0078.html
http://rhn.redhat.com/errata/RHSA-2016-0079.html
http://rhn.redhat.com/errata/RHSA-2016-0079.html
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docD…
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-…
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docD…
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-…
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docD…
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-…
https://kb.isc.org/article/AA-01272
https://kb.isc.org/article/AA-01272
https://kb.isc.org/article/AA-01305
https://kb.isc.org/article/AA-01305
https://kb.isc.org/article/AA-01306
https://kb.isc.org/article/AA-01306
https://kb.isc.org/article/AA-01307
https://kb.isc.org/article/AA-01307
https://kb.isc.org/article/AA-01438
https://kb.isc.org/article/AA-01438
https://kb.juniper.net/JSA10783
https://kb.juniper.net/JSA10783
https://kc.mcafee.com/corporate/index?page=content&id=SB101…
https://kc.mcafee.com/corporate/index?page=content&id=SB10126
https://security.gentoo.org/glsa/201510-01
https://security.gentoo.org/glsa/201510-01
https://security.netapp.com/advisory/ntap-20160114-0001/
https://security.netapp.com/advisory/ntap-20160114-0001/
https://support.apple.com/kb/HT205032
https://support.apple.com/kb/HT205032
https://www.exploit-db.com/exploits/37721/
https://www.exploit-db.com/exploits/37721/
https://www.exploit-db.com/exploits/37723/
https://www.exploit-db.com/exploits/37723/
http://www.debian.org/security/2015/dsa-3319
http://www.debian.org/security/2015/dsa-3319
http://www.oracle.com/technetwork/topics/security/bulletinj…
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
http://www.oracle.com/technetwork/topics/security/ovmbullet…
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.ht…
http://www.securityfocus.com/bid/76092
http://www.securityfocus.com/bid/76092
http://www.securitytracker.com/id/1033100
http://www.securitytracker.com/id/1033100
http://www.ubuntu.com/usn/USN-2693-1
http://www.ubuntu.com/usn/USN-2693-1
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA1…
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718
http://lists.fedoraproject.org/pipermail/package-announce/2…
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.ht…
http://lists.fedoraproject.org/pipermail/package-announce/2…
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.ht…
http://lists.fedoraproject.org/pipermail/package-announce/2…
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.ht…
http://lists.opensuse.org/opensuse-security-announce/2015-0…
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html
http://lists.opensuse.org/opensuse-security-announce/2015-0…
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html
http://lists.opensuse.org/opensuse-security-announce/2015-0…
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html
http://lists.opensuse.org/opensuse-security-announce/2015-0…
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html
http://lists.opensuse.org/opensuse-security-announce/2015-0…
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html
http://lists.opensuse.org/opensuse-security-announce/2015-0…
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2016-0…
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html
http://marc.info/?l=bugtraq&m=144000632319155&w=2
http://marc.info/?l=bugtraq&m=144000632319155&w=2
http://marc.info/?l=bugtraq&m=144017354030745&w=2
http://marc.info/?l=bugtraq&m=144017354030745&w=2
http://marc.info/?l=bugtraq&m=144181171013996&w=2
http://marc.info/?l=bugtraq&m=144181171013996&w=2
http://marc.info/?l=bugtraq&m=144294073801304&w=2
http://marc.info/?l=bugtraq&m=144294073801304&w=2
http://packetstormsecurity.com/files/132926/BIND-TKEY-Query…
http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.h…
http://rhn.redhat.com/errata/RHSA-2015-1513.html
http://rhn.redhat.com/errata/RHSA-2015-1513.html
http://rhn.redhat.com/errata/RHSA-2015-1514.html
http://rhn.redhat.com/errata/RHSA-2015-1514.html
http://rhn.redhat.com/errata/RHSA-2015-1515.html
http://rhn.redhat.com/errata/RHSA-2015-1515.html
http://rhn.redhat.com/errata/RHSA-2016-0078.html
http://rhn.redhat.com/errata/RHSA-2016-0078.html
http://rhn.redhat.com/errata/RHSA-2016-0079.html
http://rhn.redhat.com/errata/RHSA-2016-0079.html
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docD…
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-…
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docD…
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-…
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docD…
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-…
https://kb.isc.org/article/AA-01272
https://kb.isc.org/article/AA-01272
https://kb.isc.org/article/AA-01305
https://kb.isc.org/article/AA-01305
https://kb.isc.org/article/AA-01306
https://kb.isc.org/article/AA-01306
https://kb.isc.org/article/AA-01307
https://kb.isc.org/article/AA-01307
https://kb.isc.org/article/AA-01438
https://kb.isc.org/article/AA-01438
https://kb.juniper.net/JSA10783
https://kb.juniper.net/JSA10783
https://kc.mcafee.com/corporate/index?page=content&id=SB101…
https://kc.mcafee.com/corporate/index?page=content&id=SB10126
https://security.gentoo.org/glsa/201510-01
https://security.gentoo.org/glsa/201510-01
https://security.netapp.com/advisory/ntap-20160114-0001/
https://security.netapp.com/advisory/ntap-20160114-0001/
https://support.apple.com/kb/HT205032
https://support.apple.com/kb/HT205032
https://www.exploit-db.com/exploits/37721/
https://www.exploit-db.com/exploits/37721/
https://www.exploit-db.com/exploits/37723/
https://www.exploit-db.com/exploits/37723/
http://www.debian.org/security/2015/dsa-3319
http://www.debian.org/security/2015/dsa-3319
http://www.oracle.com/technetwork/topics/security/bulletinj…
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
http://www.oracle.com/technetwork/topics/security/ovmbullet…
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.ht…
http://www.securityfocus.com/bid/76092
http://www.securityfocus.com/bid/76092
http://www.securitytracker.com/id/1033100
http://www.securitytracker.com/id/1033100
http://www.ubuntu.com/usn/USN-2693-1
http://www.ubuntu.com/usn/USN-2693-1