CVE-2015-5477: ISC BIND Data Processing Errors Vulnerability

Published Jul 29, 2015
·
Updated

ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.

Other sources

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

— MITRE

Affected Software

213 affected components
ISC BIND<=9.9.7
ISC BIND<=9.10.2
ISC BIND
All of the following
Any of the following
Juniper Junos<12.1
Juniper Junos>=13.1<13.2
Juniper Junos=12.1
Juniper Junos=12.1-r11
Juniper Junos=12.1r
Juniper Junos=12.1x44
Juniper Junos=12.1x44-d10
Juniper Junos=12.1x44-d15
Juniper Junos=12.1x44-d20
Juniper Junos=12.1x44-d25
Juniper Junos=12.1x44-d30
Juniper Junos=12.1x44-d35
Juniper Junos=12.1x44-d40
Juniper Junos=12.1x44-d45
Juniper Junos=12.1x44-d50
Juniper Junos=12.1x45
Juniper Junos=12.1x45
Juniper Junos=12.1x45-d10
Juniper Junos=12.1x45-d15
Juniper Junos=12.1x45-d20
Juniper Junos=12.1x45-d30
Juniper Junos=12.1x46
Juniper Junos=12.1x46-d10
Juniper Junos=12.1x46-d15
Juniper Junos=12.1x46-d20
Juniper Junos=12.1x46-d25
Juniper Junos=12.1x46-d30
Juniper Junos=12.1x46-d35
Juniper Junos=12.1x47
Juniper Junos=12.1x47-d10
Juniper Junos=12.1x47-d15
Juniper Junos=12.1x47-d20
Juniper Junos=12.1x47-d25
Juniper Junos=12.3
Juniper Junos=12.3-r1
Juniper Junos=12.3-r10
Juniper Junos=12.3-r10-s1
Juniper Junos=12.3-r10-s2
Juniper Junos=12.3x48
Juniper Junos=12.3x48-d10
Juniper Junos=12.3x48-d15
Juniper Junos=12.3x50
Juniper Junos=12.3x50-d20
Juniper Junos=12.3x50-d30
Juniper Junos=12.3x50-d35
Juniper Junos=12.3x50-d40
Juniper Junos=12.3x50-d45
Juniper Junos=13.2
Juniper Junos=13.2-r1
Juniper Junos=13.2-r2
Juniper Junos=13.2-r3
Juniper Junos=13.2-r4
Juniper Junos=13.2-r5
Juniper Junos=13.2-r6
Juniper Junos=13.2-r7
Juniper Junos=13.2-r7-s1
Juniper Junos=13.2-r7-s2
Juniper Junos=13.2-r8
Juniper Junos=13.2x51
Juniper Junos=13.2x51-d15
Juniper Junos=13.2x51-d20
Juniper Junos=13.2x51-d20.2
Juniper Junos=13.2x51-d21
Juniper Junos=13.2x51-d25
Juniper Junos=13.2x51-d26
Juniper Junos=13.2x51-d30
Juniper Junos=13.2x51-d35
Juniper Junos=14.1
Juniper Junos=14.1-r1
Juniper Junos=14.1-r2
Juniper Junos=14.1-r3
Juniper Junos=14.1-r4
Juniper Junos=14.1-r5
Juniper Junos=14.1x50
Juniper Junos=14.1x50-d60
Juniper Junos=14.1x51
Juniper Junos=14.1x51-d60
Juniper Junos=14.1x53
Juniper Junos=14.1x53-d10
Juniper Junos=14.1x53-d15
Juniper Junos=14.1x53-d16
Juniper Junos=14.1x53-d20
Juniper Junos=14.1x53-d25
Juniper Junos=14.1x53-d26
Juniper Junos=14.1x53-d27
Juniper Junos=14.1x53-r1
Juniper Junos=14.2
Juniper Junos=14.2-r
Juniper Junos=14.2-r1
Juniper Junos=14.2-r2
Juniper Junos=14.2-r3
Juniper Junos=14.2-r4
Juniper Junos=15.1
Juniper Junos=15.1-a1
Juniper Junos=15.1-f
Juniper Junos=15.1-f1
Juniper Junos=15.1-f2
Juniper Junos=15.1-f2-s1
Juniper Junos=15.1-f2-s2
Juniper Junos=15.1-f2-s3
Juniper Junos=15.1-f2-s4
Juniper Junos=15.1-r
Juniper Junos=15.1-r1
Juniper Junos=15.1x49
Juniper Junos=15.1x49-d10
Juniper Junos=15.1x49-d15
Juniper Junos=15.1x49-d20
Juniper Junos=15.1x49-d25
Juniper Junos=15.1x53
Juniper Junos=15.1x53-d10
Any of the following
Juniper J2300
Juniper J2320
Juniper J2350
Juniper J4300
Juniper J4350
Juniper J4350 Nebs
Juniper J6300
Juniper J635 Nebs
Juniper J6350
Juniper Jx-4bri
Juniper Jx-4ct1e1
Juniper SRX100
Juniper SRX1400
Juniper SRX1500
Juniper SRX1600
Juniper SRX2300
Juniper SRX300
Juniper SRX320
Juniper SRX340
Juniper SRX3400
Juniper SRX345
Juniper SRX3600
Juniper Srx380
Juniper Srx400
Juniper SRX4100
Juniper Srx4120
Juniper SRX4200
Juniper SRX4300
Juniper Srx440
Juniper SRX4600
Juniper SRX4700
Juniper SRX5400
Juniper Srx550 Hm
Juniper SRX5600
Juniper SRX5800
Juniper SRX650
Fedoraproject Fedora=21
Fedoraproject Fedora=22
redhat Enterprise Linux=5.0
redhat Enterprise Linux=6.0
redhat Enterprise Linux=7.0
redhat Enterprise Linux Aus=6.4
redhat Enterprise Linux Aus=6.5
redhat Enterprise Linux Aus=6.6
Debian Debian Linux=7.0
Debian Debian Linux=8.0
Oracle VM Server=3.2
Oracle Solaris=10
Oracle Solaris=11.2
HP HP-UX=11.11
HP HP-UX=11.23
HP HP-UX=11.31
Canonical Ubuntu Linux=12.04
NetApp Clustered Data ONTAP
Apple OS X Server=4.1.5
HPE Dns=9.2.3
HPE Dns=9.3
HP OpenVMS=5.7
All of the following
HPE Vcx<9.8.18
Any of the following
HPE J9668a
HPE J9669a
HPE J9672a
HPE Jc516a
HPE Jc517a
HPE Jc518a
HPE Jd023a
HPE Jd024a
HPE Jd025a
HPE Jd026a
HPE Jd027a
HPE Jd028a
HPE Jd029a
HPE Je252a
HPE Je253a
HPE Je254a
HPE Je340a
HPE Je341a
HPE Je342a
HPE Je355a
SUSE Linux Enterprise Debuginfo=11-sp3
SUSE Linux Enterprise Debuginfo=11-sp4
openSUSE Evergreen=11.4
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
SUSE Linux Enterprise Desktop=11-sp3
SUSE Linux Enterprise Desktop=11-sp4
SUSE Linux Enterprise Desktop=12
SUSE Linux Enterprise Server=10-sp4
SUSE Linux Enterprise Server=11-sp1
SUSE Linux Enterprise Server=11-sp2
SUSE Linux Enterprise Server=11-sp3
SUSE Linux Enterprise Server Vmware=11-sp3
SUSE Linux Enterprise Server=11-sp4
SUSE Linux Enterprise Server=12
SUSE Linux Enterprise Software Development Kit=11-sp3
SUSE Linux Enterprise Software Development Kit=11-sp4
SUSE Linux Enterprise Software Development Kit=12
ISC BIND>=9.1.0<9.9.7
ISC BIND>=9.10.0<9.10.2
ISC BIND=9.10.2-p1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade ISC BIND to a version that resolves this vulnerability.

    Fixed in 9.9.7-P2
  2. Upgrade

    Upgrade ISC BIND to a version that resolves this vulnerability.

    Fixed in 9.10.2-P3

Event History

Jul 29, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 8, 2026
Kev Listed
via CISA·12:00 AM
Known Exploited
via CISA·12:00 AM
Data Sourced
via CISA·12:00 AM
RemedyDescriptionAffected Software
Event
via NVD·07:47 PM

Frequently Asked Questions

1

What is the severity of CVE-2015-5477?

CVE-2015-5477 has a severity rating of high due to its potential to cause denial of service.

2

How do I fix CVE-2015-5477?

To fix CVE-2015-5477, upgrade ISC BIND to version 9.9.7-P2 or later, or 9.10.2-P3 or later.

3

Which versions of ISC BIND are affected by CVE-2015-5477?

ISC BIND versions prior to 9.9.7-P2 and 9.10.2-P3 are affected by CVE-2015-5477.

4

What attack vector is exploited in CVE-2015-5477?

CVE-2015-5477 is exploited through TKEY queries that lead to a REQUIRE assertion failure.

5

Can CVE-2015-5477 lead to data loss?

CVE-2015-5477 does not directly cause data loss but can result in interruption of service.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203