CVE-2015-5477

HIGH

7.5

CVSS Score

Published: July 29, 2015 at 02:00 PM UTC

Updated: October 9, 2026 at 07:12 PM UTC

21 products affected across 13 vendorsBINDDebian LinuxFedora· also runs on 56 platforms

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploitation

CISA KEV

Exploit prediction

EPSS 100%

SSVC

Active

Actively Exploited

CISA Known Exploited Vulnerabilities (KEV) Catalog

EPSS Score99.6%

EPSS (Exploit Prediction Scoring System) estimates a 99.6% chance this CVE is exploited in the wild within the next 30 days — higher than 100% of all CVEs. It complements CVSS: a high EPSS on a mid-severity CVE can still be urgent.

ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.

Required Action

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Ransomware Use

Unknown

Added to KEV

Oct 8, 2026

Remediation Due

Oct 11, 2026

15 days overdue

Notes

This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272

https://access.redhat.com/errata/RHSA-2015:1513.html

https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477

BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk

Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk

https://nvd.nist.gov/vuln/detail/CVE-2015-5477

Description

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

BIND · Isc

96%

9.1.0 ≤ v < 9.9.79.10.0 ≤ v < 9.10.2*9.10.2 9.10.2 p1

OS X Server · Apple

95%

4.1.5

Ubuntu Linux · Canonicalrubygems

95%

12.04

Debian Linux · Debiandrupal

95%

7.0 8.0

Fedora · Fedora Projectrpm

95%

95%

95%

95%

95%

v < 9.8.18*

hpe-j9668a (environment) · hpe-j9669a (environment) · hpe-j9672a (environment) · hpe-jc516a (environment) · hpe-jc517a (environment) · hpe-jc518a (environment) · hpe-jd023a (environment) · hpe-jd024a (environment) · hpe-jd025a (environment) · hpe-jd026a (environment) · hpe-jd027a (environment) · hpe-jd028a (environment) · hpe-jd029a (environment) · hpe-je252a (environment) · hpe-je253a (environment) · hpe-je254a (environment) · hpe-je340a (environment) · hpe-je341a (environment) · hpe-je342a (environment) · hpe-je355a (environment)

Junos · Juniper Networks

95%

v < 12.113.1 ≤ v < 13.2*12.1 12.1 r11 12.1r 12.1x44 12.1x44 d10 12.1x44 d15 12.1x44 d20 12.1x44 d25 12.1x44 d30 12.1x44 d35 12.1x44 d40 12.1x44 d45 12.1x44 d50 12.1x45 12.1x45 d10 12.1x45 d15 12.1x45 d20 12.1x45 d3012.1x4612.1x46 d10 12.1x46 d15 12.1x46 d2012.1x46 d2512.1x46 d30 12.1x46 d35 12.1x47 12.1x47 d10 12.1x47 d15 12.1x47 d20 12.1x47 d25 12.3 12.3 r1 12.3 r10 12.3 r10-s1 12.3 r10-s212.3x4812.3x48 d10 12.3x48 d15 12.3x50 12.3x50 d20 12.3x50 d30 12.3x50 d35 12.3x50 d40 12.3x50 d45 13.2 13.2 r1 13.2 r2 13.2 r3 13.2 r4 13.2 r5 13.2 r6 13.2 r7 13.2 r7-s1 13.2 r7-s2 13.2 r8 13.2x51 13.2x51 d15 13.2x51 d20 13.2x51 d20.2 13.2x51 d21 13.2x51 d25 13.2x51 d26 13.2x51 d30 13.2x51 d35 14.1 14.1 r1 14.1 r2 14.1 r3 14.1 r4 14.1 r514.1x5014.1x50 d60 14.1x51 14.1x51 d6014.1x5314.1x53 d10 14.1x53 d15 14.1x53 d16 14.1x53 d20 14.1x53 d25 14.1x53 d26 14.1x53 d27 14.1x53 r1 14.2 14.2 r 14.2 r1 14.2 r2 14.2 r3 14.2 r4 15.1 15.1 a1 15.1 f 15.1 f1 15.1 f2 15.1 f2-s1 15.1 f2-s2 15.1 f2-s3 15.1 f2-s4 15.1 r 15.1 r115.1x4915.1x49 d10 15.1x49 d15 15.1x49 d20 15.1x49 d2515.1x5315.1x53 d10

juniper-j2300 (environment) · juniper-j2320 (environment) · juniper-j2350 (environment) · juniper-j4300 (environment) · juniper-j4350 (environment) · juniper-j4350-nebs (environment) · juniper-j6300 (environment) · juniper-j635-nebs (environment) · juniper-j6350 (environment) · juniper-jx-4bri (environment) · juniper-jx-4ct1e1 (environment) · juniper-srx100 (environment) · juniper-srx1400 (environment) · juniper-srx1500 (environment) · juniper-srx1600 (environment) · juniper-srx2300 (environment) · juniper-srx300 (environment) · juniper-srx320 (environment) · juniper-srx340 (environment) · juniper-srx3400 (environment) · juniper-srx345 (environment) · juniper-srx3600 (environment) · juniper-srx380 (environment) · juniper-srx400 (environment) · juniper-srx4100 (environment) · juniper-srx4120 (environment) · juniper-srx4200 (environment) · juniper-srx4300 (environment) · juniper-srx440 (environment) · juniper-srx4600 (environment) · juniper-srx4700 (environment) · juniper-srx5400 (environment) · juniper-srx550-hm (environment) · juniper-srx5600 (environment) · juniper-srx5800 (environment) · juniper-srx650 (environment)