CVE-2015-5477

Published: Jul 29, 2015Modified: Oct 9, 2026CISA KEV

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

Affected (154)

Products: Juniper: Junos · Fedoraproject: Fedora · Redhat: Enterprise Linux, Enterprise Linux Aus · +10 more

Show all products

Juniper: Junos · Fedoraproject: Fedora · Redhat: Enterprise Linux, Enterprise Linux Aus · Debian: Debian Linux · Oracle: Solaris, Vm Server · Hp: Hp Ux, Openvms · Canonical: Ubuntu Linux · Netapp: Clustered Data Ontap · Apple: Os X Server · Hpe: Dns, Vcx · Opensuse: Evergreen, Opensuse · Suse: Linux Enterprise Debuginfo, Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Software Development Kit · Isc: Bind

1 product

1 product

2 products

1 product

2 products

2 products

1 product

1 product

1 product

2 products

2 products

4 products

Linux Enterprise Debuginfo

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Software Development Kit

Isc

1 product

Bind

Configuration A

110 vulnerable · 36 platform

Vulnerable Software	Affected Versions
Juniper Junos	version < 12.1
Juniper Junos	13.1 ≤ version < 13.2
Juniper Junos	Version 12.1
Juniper Junos	Version 12.1 r11
Juniper Junos	Version 12.1r
Juniper Junos	Version 12.1x44
Juniper Junos	Version 12.1x44 d10
Juniper Junos	Version 12.1x44 d15
Juniper Junos	Version 12.1x44 d20
Juniper Junos	Version 12.1x44 d25
Juniper Junos	Version 12.1x44 d30
Juniper Junos	Version 12.1x44 d35
Juniper Junos	Version 12.1x44 d40
Juniper Junos	Version 12.1x44 d45
Juniper Junos	Version 12.1x44 d50
Juniper Junos	Version 12.1x45
Juniper Junos	Version 12.1x45
Juniper Junos	Version 12.1x45 d10
Juniper Junos	Version 12.1x45 d15
Juniper Junos	Version 12.1x45 d20
Juniper Junos	Version 12.1x45 d30
Juniper Junos	Version 12.1x46
Juniper Junos	Version 12.1x46 d10
Juniper Junos	Version 12.1x46 d15
Juniper Junos	Version 12.1x46 d20
Juniper Junos	Version 12.1x46 d25
Juniper Junos	Version 12.1x46 d30
Juniper Junos	Version 12.1x46 d35
Juniper Junos	Version 12.1x47
Juniper Junos	Version 12.1x47 d10
Juniper Junos	Version 12.1x47 d15
Juniper Junos	Version 12.1x47 d20
Juniper Junos	Version 12.1x47 d25
Juniper Junos	Version 12.3
Juniper Junos	Version 12.3 r10-s1
Juniper Junos	Version 12.3 r10-s2
Juniper Junos	Version 12.3 r10
Juniper Junos	Version 12.3 r1
Juniper Junos	Version 12.3x48
Juniper Junos	Version 12.3x48 d10
Juniper Junos	Version 12.3x48 d15
Juniper Junos	Version 12.3x50
Juniper Junos	Version 12.3x50 d20
Juniper Junos	Version 12.3x50 d30
Juniper Junos	Version 12.3x50 d35
Juniper Junos	Version 12.3x50 d40
Juniper Junos	Version 12.3x50 d45
Juniper Junos	Version 13.2
Juniper Junos	Version 13.2 r1
Juniper Junos	Version 13.2 r2
Juniper Junos	Version 13.2 r3
Juniper Junos	Version 13.2 r4
Juniper Junos	Version 13.2 r5
Juniper Junos	Version 13.2 r6
Juniper Junos	Version 13.2 r7-s1
Juniper Junos	Version 13.2 r7-s2
Juniper Junos	Version 13.2 r7
Juniper Junos	Version 13.2 r8
Juniper Junos	Version 13.2x51
Juniper Junos	Version 13.2x51 d15
Juniper Junos	Version 13.2x51 d20.2
Juniper Junos	Version 13.2x51 d20
Juniper Junos	Version 13.2x51 d21
Juniper Junos	Version 13.2x51 d25
Juniper Junos	Version 13.2x51 d26
Juniper Junos	Version 13.2x51 d30
Juniper Junos	Version 13.2x51 d35
Juniper Junos	Version 14.1
Juniper Junos	Version 14.1 r1
Juniper Junos	Version 14.1 r2
Juniper Junos	Version 14.1 r3
Juniper Junos	Version 14.1 r4
Juniper Junos	Version 14.1 r5
Juniper Junos	Version 14.1x50
Juniper Junos	Version 14.1x50 d60
Juniper Junos	Version 14.1x51
Juniper Junos	Version 14.1x51 d60
Juniper Junos	Version 14.1x53
Juniper Junos	Version 14.1x53 d10
Juniper Junos	Version 14.1x53 d15
Juniper Junos	Version 14.1x53 d16
Juniper Junos	Version 14.1x53 d20
Juniper Junos	Version 14.1x53 d25
Juniper Junos	Version 14.1x53 d26
Juniper Junos	Version 14.1x53 d27
Juniper Junos	Version 14.1x53 r1
Juniper Junos	Version 14.2
Juniper Junos	Version 14.2 r1
Juniper Junos	Version 14.2 r2
Juniper Junos	Version 14.2 r3
Juniper Junos	Version 14.2 r4
Juniper Junos	Version 14.2 r
Juniper Junos	Version 15.1
Juniper Junos	Version 15.1 a1
Juniper Junos	Version 15.1 f1
Juniper Junos	Version 15.1 f2-s1
Juniper Junos	Version 15.1 f2-s2
Juniper Junos	Version 15.1 f2-s3
Juniper Junos	Version 15.1 f2-s4
Juniper Junos	Version 15.1 f2
Juniper Junos	Version 15.1 f
Juniper Junos	Version 15.1 r1
Juniper Junos	Version 15.1 r
Juniper Junos	Version 15.1x49
Juniper Junos	Version 15.1x49 d10
Juniper Junos	Version 15.1x49 d15
Juniper Junos	Version 15.1x49 d20
Juniper Junos	Version 15.1x49 d25
Juniper Junos	Version 15.1x53
Juniper Junos	Version 15.1x53 d10

Running on/with	Platform Versions
Juniper J2300	All versions
Juniper J2320	All versions
Juniper J2350	All versions
Juniper J4300	All versions
Juniper J4350	All versions
Juniper J4350 Nebs	All versions
Juniper J6300	All versions
Juniper J6350	All versions
Juniper J635 Nebs	All versions
Juniper Jx 4bri	All versions
Juniper Jx 4ct1e1	All versions
Juniper Srx100	All versions
Juniper Srx1400	All versions
Juniper Srx1500	All versions
Juniper Srx1600	All versions
Juniper Srx2300	All versions
Juniper Srx300	All versions
Juniper Srx320	All versions
Juniper Srx340	All versions
Juniper Srx3400	All versions
Juniper Srx345	All versions
Juniper Srx3600	All versions
Juniper Srx380	All versions
Juniper Srx400	All versions
Juniper Srx4100	All versions
Juniper Srx4120	All versions
Juniper Srx4200	All versions
Juniper Srx4300	All versions
Juniper Srx440	All versions
Juniper Srx4600	All versions
Juniper Srx4700	All versions
Juniper Srx5400	All versions
Juniper Srx550 Hm	All versions
Juniper Srx5600	All versions
Juniper Srx5800	All versions
Juniper Srx650	All versions

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 21
Fedoraproject Fedora	Version 22

Configuration C

6 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 5.0
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux Aus	Version 6.4
Redhat Enterprise Linux Aus	Version 6.5
Redhat Enterprise Linux Aus	Version 6.6

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Oracle Solaris	Version 10
Oracle Solaris	Version 11.2
Oracle Vm Server	Version 3.2

Configuration F

3 vulnerable

Vulnerable Software	Affected Versions
Hp Hp Ux	Version 11.11
Hp Hp Ux	Version 11.23
Hp Hp Ux	Version 11.31

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Netapp Clustered Data Ontap	All versions

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Apple Os X Server	Version 4.1.5

Configuration J

3 vulnerable

Vulnerable Software	Affected Versions
Hp Openvms	Version 5.7
Hpe Dns	Version 9.2.3
Hpe Dns	Version 9.3

Configuration K

1 vulnerable · 20 platform

Vulnerable Software	Affected Versions
Hpe Vcx	version < 9.8.18

Running on/with	Platform Versions
Hpe J9668a	All versions
Hpe J9669a	All versions
Hpe J9672a	All versions
Hpe Jc516a	All versions
Hpe Jc517a	All versions
Hpe Jc518a	All versions
Hpe Jd023a	All versions
Hpe Jd024a	All versions
Hpe Jd025a	All versions
Hpe Jd026a	All versions
Hpe Jd027a	All versions
Hpe Jd028a	All versions
Hpe Jd029a	All versions
Hpe Je252a	All versions
Hpe Je253a	All versions
Hpe Je254a	All versions
Hpe Je340a	All versions
Hpe Je341a	All versions
Hpe Je342a	All versions
Hpe Je355a	All versions

Configuration L

18 vulnerable

Vulnerable Software	Affected Versions
Opensuse Evergreen	Version 11.4
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2
Suse Linux Enterprise Debuginfo	Version 11 sp3
Suse Linux Enterprise Debuginfo	Version 11 sp4
Suse Linux Enterprise Desktop	Version 11 sp3
Suse Linux Enterprise Desktop	Version 11 sp4
Suse Linux Enterprise Desktop	Version 12
Suse Linux Enterprise Server	Version 10 sp4
Suse Linux Enterprise Server	Version 11 sp1
Suse Linux Enterprise Server	Version 11 sp2
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp3
Suse Linux Enterprise Server	Version 11 sp4
Suse Linux Enterprise Server	Version 12
Suse Linux Enterprise Software Development Kit	Version 11 sp3
Suse Linux Enterprise Software Development Kit	Version 11 sp4
Suse Linux Enterprise Software Development Kit	Version 12

Configuration M

3 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	9.1.0 ≤ version < 9.9.7
Isc Bind	9.10.0 ≤ version < 9.10.2
Isc Bind	Version 9.10.2 p1

Related CWEs

CWE-19

CWE-617

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (85)

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718

Source: cve@mitre.org

MitigationThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=144000632319155&w=2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=144017354030745&w=2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=144181171013996&w=2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=144294073801304&w=2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://rhn.redhat.com/errata/RHSA-2015-1513.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1514.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1515.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0078.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0079.html

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2015/dsa-3319

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html

Source: cve@mitre.org

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/76092

Source: cve@mitre.org

Third Party Advisory

http://www.securitytracker.com/id/1033100

Source: cve@mitre.org

Broken Link

http://www.ubuntu.com/usn/USN-2693-1

Source: cve@mitre.org

Third Party Advisory

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415

Source: cve@mitre.org

Third Party Advisory

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480

Source: cve@mitre.org

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918

Source: cve@mitre.org

Third Party Advisory

https://kb.isc.org/article/AA-01272

Source: cve@mitre.org

PatchVendor AdvisoryBroken Link

https://kb.isc.org/article/AA-01305

Source: cve@mitre.org

Broken Link

https://kb.isc.org/article/AA-01306

Source: cve@mitre.org

Broken Link

https://kb.isc.org/article/AA-01307

Source: cve@mitre.org

Broken Link

https://kb.isc.org/article/AA-01438

Source: cve@mitre.org

Broken Link

https://kb.juniper.net/JSA10783

Source: cve@mitre.org

Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10126

Source: cve@mitre.org

Broken Link

https://security.gentoo.org/glsa/201510-01

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20160114-0001/

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT205032

Source: cve@mitre.org

Third Party Advisory

https://www.exploit-db.com/exploits/37721/

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/37723/

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718