named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows
remote attackers to cause a denial of service (REQUIRE assertion failure
and daemon exit) via TKEY queries.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchbind9< 1:9.8.1.dfsg.P1-4ubuntu0.12UNKNOWN
ubuntu14.04noarchbind9< 1:9.9.5.dfsg-3ubuntu0.4UNKNOWN
ubuntu15.04noarchbind9< 1:9.9.5.dfsg-9ubuntu0.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	bind9	< 1:9.8.1.dfsg.P1-4ubuntu0.12	UNKNOWN
ubuntu	14.04	noarch	bind9	< 1:9.9.5.dfsg-3ubuntu0.4	UNKNOWN
ubuntu	15.04	noarch	bind9	< 1:9.9.5.dfsg-9ubuntu0.2	UNKNOWN

References

kb.isc.org/article/AA-01272/0

launchpad.net/bugs/cve/CVE-2015-5477

nvd.nist.gov/vuln/detail/CVE-2015-5477

security-tracker.debian.org/tracker/CVE-2015-5477

ubuntu.com/security/notices/USN-2693-1

www.cve.org/CVERecord?id=CVE-2015-5477

nessus 44

fedora 3

suse 7

securityvulns 4

myhack58 1

altlinux 3

redhat 5

veracode 1

openvas 35

packetstorm 1

freebsd_advisory 1

checkpoint_advisories 2

hackerone 3

zdt 3

f5 2

freebsd 1

exploitpack 2

cve 1

archlinux 1

slackware 1

amazon 1

centos 3

metasploit 1

debiancve 1

debian 3

osv 2

oraclelinux 11

ibm 3

threatpost 1

aix 1

mageia 1

prion 1

exploitdb 2

ubuntu 1

gentoo 1

nessus

Fedora 22 : bind-9.10.2-4.P3.fc22 (2015-12335)

2015-08-03 00:00:00

SUSE SLES10 Security Update : bind (SUSE-SU-2015:1322-1)

2015-08-03 00:00:00

AIX 6.1 TL 9 : bind9 (IV75692)

2015-08-17 00:00:00

fedora

[SECURITY] Fedora 22 Update: bind-9.10.2-4.P3.fc22

2015-08-01 02:25:40

[SECURITY] Fedora 22 Update: bind99-9.9.7-6.P2.fc22

2015-08-01 02:27:27

[SECURITY] Fedora 21 Update: bind-9.9.6-10.P1.fc21

2015-08-01 02:26:01

suse

Security update for bind (important)

2015-07-28 21:08:56

Security update for bind (important)

2015-07-28 21:09:26

Security update for bind (important)

2015-07-30 18:09:56

securityvulns

ISC bind named DoS

2015-08-03 00:00:00

APPLE-SA-2015-08-13-4 OS X Server v4.1.5

2015-08-17 00:00:00

FreeBSD Security Advisory FreeBSD-SA-15:17.bind

2015-08-03 00:00:00

myhack58

A data packet to eliminate a single server of the DNS vulnerability-vulnerability warning-the black bar safety net

2015-08-02 00:00:00

altlinux

Security fix for the ALT Linux 9 package bind version 9.9.7-alt1

2015-07-28 00:00:00

Security fix for the ALT Linux 7 package bind version 9.9.7-alt1

2015-07-28 00:00:00

Security fix for the ALT Linux 8 package bind version 9.9.7-alt1

2015-07-28 00:00:00

redhat

(RHSA-2015:1513) Important: bind security update

2015-07-28 00:00:00

(RHSA-2015:1515) Important: bind97 security update

2015-07-28 00:00:00

(RHSA-2015:1514) Important: bind security update

2015-07-28 00:00:00

veracode

Denial Of Service (DoS)

2019-01-15 09:06:56

openvas

Debian Security Advisory DSA 3319-1 (bind9 - security update)

2015-07-28 00:00:00

openSUSE: Security Advisory for bind (openSUSE-SU-2015:1335-1)

2015-08-04 00:00:00

SUSE: Security Advisory (SUSE-SU-2015:1316-1)

2021-06-09 00:00:00

packetstorm

BIND TKEY Query Denial Of Service

2015-07-31 00:00:00

freebsd_advisory

FreeBSD-SA-15:17.bind

2015-07-28 00:00:00

checkpoint_advisories

ISC BIND TKEY Queries Assertion Failure (CVE-2015-5477)

2020-12-22 00:00:00

ISC BIND Invalid TKEY Query Denial Of Service (CVE-2015-5477; CVE-2020-8625)

2015-08-01 00:00:00

hackerone

ownCloud: doc.owncloud.com: CVE-2015-5477 BIND9 TKEY Vulnerability + Exploit (Denial of Service)

2017-03-31 03:48:28

Nextcloud: ci.nextcloud.com: CVE-2015-5477 BIND9 TKEY Vulnerability + Exploit (Denial of Service)

2017-06-07 23:28:05

ownCloud: owncloud.com: CVE-2015-5477 BIND9 TKEY Vulnerability + Exploit (Denial of Service)

2015-09-15 20:11:07

zdt

ISC BIND9 TKEY Remote DoS PoC

2015-08-05 00:00:00

BIND9 TKEY Query Denial of Service Exploit

2015-08-04 00:00:00

BIND9 - TKEY PoC Exploit

2015-08-01 00:00:00

K16909 : BIND vulnerability CVE-2015-5477

2015-11-03 00:00:00

SOL16909 - BIND vulnerability CVE-2015-5477

2015-07-28 00:00:00

freebsd

bind -- denial of service vulnerability

2015-07-21 00:00:00

exploitpack

ISC BIND 9 - TKEY (PoC)

2015-08-01 00:00:00

ISC BIND 9 - TKEY Remote Denial of Service (PoC)

2015-08-05 00:00:00

cve

CVE-2015-5477

2015-07-29 14:59:00

archlinux

bind: denial of service

2015-07-29 00:00:00

slackware

[slackware-security] bind

2015-07-28 19:38:44

amazon

Critical: bind

2015-07-28 11:32:00

centos

bind, caching security update

2015-07-29 02:04:03

bind97 security update

2015-07-29 02:03:50

bind security update

2015-07-29 01:43:33

metasploit

BIND TKEY Query Denial of Service

2015-08-01 11:01:35

debiancve

CVE-2015-5477

2015-07-29 14:59:00

debian

[SECURITY] [DSA 3319-1] bind9 security update

2015-07-28 19:05:08

[SECURITY] [DSA 3319-1] bind9 security update

2015-07-28 19:05:08

[SECURITY] [DLA 285-1] bind9 security update

2015-07-28 19:23:41

osv

bind9 - security update

2015-07-28 00:00:00

bind9 - security update

2015-07-28 00:00:00

oraclelinux

bind security update

2015-07-29 00:00:00

bind security update

2015-07-29 00:00:00

bind97 security update

2015-07-29 00:00:00

ibm

Security Bulletin: Vulnerability in BIND affects IBM Netezza Host Management (CVE-2015-5477)

2019-10-18 03:10:29

Security Bulletin: IBM i is affected by networking BIND vulnerabilities CVE-2015-5477 and CVE-2015-4620.

2019-12-18 14:26:38

Security Bulletin: Multiple vulnerabilities in NTP, Hivex, glibc, libuser, BIND affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance

2018-06-17 22:30:13

threatpost

Critical Remotely Exploitable Bug Haunts BIND

2015-07-29 09:09:28

aix

Vulnerability in BIND affects AIX,Vulnerability in BIND affects VIOS

2015-08-13 10:35:36

mageia

Updated bind package fixes security vulnerability

2015-08-01 01:46:26

prion

Authentication flaw

2015-07-29 14:59:00

exploitdb

ISC BIND 9 - TKEY (PoC)

2015-08-01 00:00:00

ISC BIND 9 - TKEY Remote Denial of Service (PoC)

2015-08-05 00:00:00

ubuntu

Bind vulnerabilities

2015-07-28 00:00:00

gentoo

BIND: Denial of service

2015-10-18 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.972 High

EPSS

Percentile

99.8%

JSON

Related for UB:CVE-2015-5477