CVE-2015-5477
Description
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
How to fix
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
CISA due date: Oct 11, 2026- isc bind9.9.7, 9.10.2 or later
- juniper junos12.1, 13.2 or later
- hpe vcx9.8.18 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| isc bind | 9.1.0 ≤ v < 9.9.7, 9.10.0 ≤ v < 9.10.2, 9.10.2 | 9.9.7, 9.10.2 |
| juniper junos | v < 12.1, 13.1 ≤ v < 13.2, 12.1, 12.1r, 12.1x44, 12.1x45, 12.1x46, 12.1x47, 12.3, 12.3x48, 12.3x50, 13.2, 13.2x51, 14.1, 14.1x50, 14.1x51, 14.1x53, 14.2, 15.1, 15.1x49, 15.1x53 | 12.1, 13.2 |
| fedoraproject fedora | 21, 22 | — |
| redhat enterprise_linux | 5.0, 6.0, 7.0 | — |
| redhat enterprise_linux_aus | 6.4, 6.5, 6.6 | — |
| debian debian_linux | 7.0, 8.0 | — |
| oracle vm_server | 3.2 | — |
| oracle solaris | 10, 11.2 | — |
| hp hp-ux | 11.11, 11.23, 11.31 | — |
| canonical ubuntu_linux | 12.04 | — |
| netapp clustered_data_ontap | No range specified | — |
| apple os_x_server | 4.1.5 | — |
| hpe dns | 9.2.3, 9.3 | — |
| hp openvms | 5.7 | — |
| hpe vcx | v < 9.8.18 | 9.8.18 |
| suse linux_enterprise_debuginfo | 11 | — |
| opensuse evergreen | 11.4 | — |
| opensuse opensuse | 13.1, 13.2 | — |
| suse linux_enterprise_desktop | 11, 12 | — |
| suse linux_enterprise_server | 10, 11, 12 | — |
| suse linux_enterprise_software_development_kit | 11, 12 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.