# CVE-2015-5477:  ISC BIND Data Processing Errors Vulnerability

> CVE-2015-5477: ISC BIND Data Processing Errors Vulnerability. CVSS 7.5 (CVSS 3.1), in CISA KEV.

Canonical: https://rewindex.com/cve/CVE-2015-5477
Last updated: 2026-10-09T19:12:37Z

- Published: 2015-07-29 14:00 UTC · Updated: 2026-10-09 19:12 UTC · Assigner: mitre
- CVSS: 7.5 (CVSS 3.1) · Severity: High · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS: 99.6%, 100th percentile (scored 2026-10-25)
- CISA KEV: yes, added 2026-10-08, federal due date 2026-10-11, ransomware use: Unknown

## Description

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

## CISA required action

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

## Affected vendors and products

- ISC: BIND

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2015-5477)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2015-5477)
- [http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718](http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718)
- [http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html](http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html)
- [http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html](http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html)
- [http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html](http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html)
- [http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html](http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html)
- [http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html](http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html)
- [http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html](http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html)
- [http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html](http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html)
- [http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html](http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html)
- [http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html](http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html)
- [http://marc.info/?l=bugtraq&m=144000632319155&w=2](http://marc.info/?l=bugtraq&m=144000632319155&w=2)
- [http://marc.info/?l=bugtraq&m=144017354030745&w=2](http://marc.info/?l=bugtraq&m=144017354030745&w=2)
- [http://marc.info/?l=bugtraq&m=144181171013996&w=2](http://marc.info/?l=bugtraq&m=144181171013996&w=2)
- [http://marc.info/?l=bugtraq&m=144294073801304&w=2](http://marc.info/?l=bugtraq&m=144294073801304&w=2)
- [http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html](http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html)
- [http://rhn.redhat.com/errata/RHSA-2015-1513.html](http://rhn.redhat.com/errata/RHSA-2015-1513.html)
- [http://rhn.redhat.com/errata/RHSA-2015-1514.html](http://rhn.redhat.com/errata/RHSA-2015-1514.html)
- [http://rhn.redhat.com/errata/RHSA-2015-1515.html](http://rhn.redhat.com/errata/RHSA-2015-1515.html)
- [http://rhn.redhat.com/errata/RHSA-2016-0078.html](http://rhn.redhat.com/errata/RHSA-2016-0078.html)
- [http://rhn.redhat.com/errata/RHSA-2016-0079.html](http://rhn.redhat.com/errata/RHSA-2016-0079.html)
- [https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr\_na-c04789415](https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415)
- [https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr\_na-c04952480](https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480)
- [https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr\_na-c05095918](https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918)
- [https://kb.isc.org/article/AA-01305](https://kb.isc.org/article/AA-01305)
- [https://kb.isc.org/article/AA-01307](https://kb.isc.org/article/AA-01307)
- [https://kb.isc.org/article/AA-01438](https://kb.isc.org/article/AA-01438)
- [https://kb.juniper.net/JSA10783](https://kb.juniper.net/JSA10783)
- [https://security.gentoo.org/glsa/201510-01](https://security.gentoo.org/glsa/201510-01)
- [https://security.netapp.com/advisory/ntap-20160114-0001/](https://security.netapp.com/advisory/ntap-20160114-0001/)
- [https://support.apple.com/kb/HT205032](https://support.apple.com/kb/HT205032)
- [https://www.exploit-db.com/exploits/37721/](https://www.exploit-db.com/exploits/37721/)
- [https://www.exploit-db.com/exploits/37723/](https://www.exploit-db.com/exploits/37723/)
- [http://www.debian.org/security/2015/dsa-3319](http://www.debian.org/security/2015/dsa-3319)
- [http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html](http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html)
- [http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html](http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html)
- [http://www.securityfocus.com/bid/76092](http://www.securityfocus.com/bid/76092)
- [http://www.securitytracker.com/id/1033100](http://www.securitytracker.com/id/1033100)
- [http://www.ubuntu.com/usn/USN-2693-1](http://www.ubuntu.com/usn/USN-2693-1)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2015-5477 · Markdown: https://rewindex.com/cve/CVE-2015-5477.md · JSON: https://rewindex.com/api/v1/cves/CVE-2015-5477 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T02:01:54.686Z