# CVE-2015-5477:  ISC BIND Data Processing Errors Vulnerability

Status: published. Published: 2015-07-29. Updated: 2026-11-03.

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

## Remediation

- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: cve@mitre.org) — https://kb.isc.org/article/AA-01272
- fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: af854a3a-2127-422b-91ae-364da2661108) — https://kb.isc.org/article/AA-01272

## Affected products and versions

- n/a / n/a: Version not specified (affected). Source: CNA: mitre

## NVD configuration conditions

Affected CPE matches depend on the following AND/OR and negation conditions:

```json
[
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "12.1",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "13.2",
            "versionStartIncluding": "13.1",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1:r11:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1r:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x44:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x44:d10:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x44:d15:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x44:d20:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x44:d25:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x44:d30:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x44:d35:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x44:d40:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x44:d45:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x44:d50:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x45:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x45:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x45:d10:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x45:d15:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x45:d20:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x45:d30:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x46:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x47:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x47:d10:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x47:d15:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x47:d20:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.1x47:d25:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.3:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.3:r10:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.3:r10-s1:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.3:r10-s2:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.3x48:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.3x50:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.3x50:d20:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.3x50:d30:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.3x50:d35:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.3x50:d40:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:12.3x50:d45:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2:r1:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2:r2:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2:r3:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2:r4:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2:r5:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2:r6:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2:r7:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2:r7-s1:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2:r7-s2:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2:r8:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2x51:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2x51:d15:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2x51:d20:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2x51:d20.2:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2x51:d21:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2x51:d25:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2x51:d26:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2x51:d30:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:13.2x51:d35:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1x50:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1x50:d60:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1x51:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1x51:d60:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1x53:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1x53:d20:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.1x53:r1:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.2:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.2:r:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1:f:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1:r:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d15:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d25:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1x53:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:juniper:j2300:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:j2320:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:j2350:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:j4300:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:j4350:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:j4350_nebs:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:j6300:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:j635_nebs:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:j6350:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:jx-4bri:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:jx-4ct1e1:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx1600:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx2300:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx400:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx4120:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx4300:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx440:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx4700:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_aus:6.4:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_aus:6.5:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_aus:6.6:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:oracle:vm_server:3.2:*:*:*:*:*:x86:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:hp:hp-ux:11.31:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:os_x_server:4.1.5:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:hpe:dns:9.2.3:*:*:*:non_secure:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:hpe:dns:9.3:*:*:*:secure:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:hp:openvms:5.7:*:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:hpe:vcx:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "9.8.18",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:hpe:j9668a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:j9669a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:j9672a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:jc516a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:jc517a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:jc518a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:jd023a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:jd024a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:jd025a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:jd026a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:jd027a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:jd028a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:jd029a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:je252a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:je253a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:je254a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:je340a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:je341a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:je342a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          },
          {
            "criteria": "cpe:2.3:h:hpe:je355a:-:*:*:*:*:*:*:*",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:11:sp4:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:ltss:-:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:*:*:*:*:*:*",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  },
  {
    "negate": false,
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "9.9.7",
            "versionStartIncluding": "9.1.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
            "versionEndExcluding": "9.10.2",
            "versionStartIncluding": "9.10.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:isc:bind:9.10.2:p1:*:*:-:*:*:*",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "OR"
  }
]
```

## Severity and prioritization

- CVSS 3.1: 7.5 (high); CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H; source: ADP: CISA-ADP

- CVSS 3.1: 7.5 (high); CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H; source: NVD: 134c704f-9b21-4f2e-91b3-4a467353bcc0

- CVSS 2.0: 7.8 (high); AV:N/AC:L/Au:N/C:N/I:N/A:C; source: NVD: nvd@nist.gov

- CISA KEV: listed; Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.; due 2026-10-11

- EPSS: 99.58% as of 2026-11-03; percentile 99.95%

- SSVC: exploitation active; automatable yes; technical impact total; source ADP: CISA-ADP

- Weaknesses: CWE-617, CWE-19

## Exploit evidence

- exploit: https://www.exploit-db.com/exploits/37721/ (CNA: mitre)
- exploit: https://www.exploit-db.com/exploits/37723/ (CNA: mitre)
- exploit: https://www.exploit-db.com/exploits/37721/ (ADP: CVE)
- exploit: https://www.exploit-db.com/exploits/37723/ (ADP: CVE)
- exploit: https://www.exploit-db.com/exploits/37721/ (cve@mitre.org)
- exploit: https://www.exploit-db.com/exploits/37721/ (af854a3a-2127-422b-91ae-364da2661108)

## References

- http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html (CNA: mitre; x_refsource_MISC)

- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html (CNA: mitre; x_refsource_CONFIRM)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html (CNA: mitre; vendor-advisory, x_refsource_SUSE)

- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415 (CNA: mitre; x_refsource_CONFIRM)

- https://kb.juniper.net/JSA10783 (CNA: mitre; x_refsource_CONFIRM)

- http://rhn.redhat.com/errata/RHSA-2015-1513.html (CNA: mitre; vendor-advisory, x_refsource_REDHAT)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html (CNA: mitre; vendor-advisory, x_refsource_SUSE)

- https://security.netapp.com/advisory/ntap-20160114-0001/ (CNA: mitre; x_refsource_CONFIRM)

- https://kb.isc.org/article/AA-01438 (CNA: mitre; x_refsource_CONFIRM)

- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html (CNA: mitre; vendor-advisory, x_refsource_FEDORA)

- http://marc.info/?l=bugtraq&m=144017354030745&w=2 (CNA: mitre; vendor-advisory, x_refsource_HP)

- http://marc.info/?l=bugtraq&m=144294073801304&w=2 (CNA: mitre; vendor-advisory, x_refsource_HP)

- http://rhn.redhat.com/errata/RHSA-2016-0079.html (CNA: mitre; vendor-advisory, x_refsource_REDHAT)

- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918 (CNA: mitre; x_refsource_CONFIRM)

- http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html (CNA: mitre; x_refsource_CONFIRM)

- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718 (CNA: mitre; x_refsource_CONFIRM)

- http://rhn.redhat.com/errata/RHSA-2015-1514.html (CNA: mitre; vendor-advisory, x_refsource_REDHAT)

- http://www.ubuntu.com/usn/USN-2693-1 (CNA: mitre; vendor-advisory, x_refsource_UBUNTU)

- https://support.apple.com/kb/HT205032 (CNA: mitre; x_refsource_CONFIRM)

- http://www.securitytracker.com/id/1033100 (CNA: mitre; vdb-entry, x_refsource_SECTRACK)

- https://kb.isc.org/article/AA-01307 (CNA: mitre; x_refsource_CONFIRM)

- http://www.securityfocus.com/bid/76092 (CNA: mitre; vdb-entry, x_refsource_BID)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html (CNA: mitre; vendor-advisory, x_refsource_SUSE)

- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html (CNA: mitre; vendor-advisory, x_refsource_SUSE)

- https://www.exploit-db.com/exploits/37721/ (CNA: mitre; exploit, x_refsource_EXPLOIT-DB)

- http://rhn.redhat.com/errata/RHSA-2015-1515.html (CNA: mitre; vendor-advisory, x_refsource_REDHAT)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html (CNA: mitre; vendor-advisory, x_refsource_SUSE)

- https://security.gentoo.org/glsa/201510-01 (CNA: mitre; vendor-advisory, x_refsource_GENTOO)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html (CNA: mitre; vendor-advisory, x_refsource_SUSE)

- http://marc.info/?l=bugtraq&m=144181171013996&w=2 (CNA: mitre; vendor-advisory, x_refsource_HP)

- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480 (CNA: mitre; x_refsource_CONFIRM)

- http://www.debian.org/security/2015/dsa-3319 (CNA: mitre; vendor-advisory, x_refsource_DEBIAN)

- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html (CNA: mitre; vendor-advisory, x_refsource_FEDORA)

- http://marc.info/?l=bugtraq&m=144000632319155&w=2 (CNA: mitre; vendor-advisory, x_refsource_HP)

- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html (CNA: mitre; vendor-advisory, x_refsource_FEDORA)

- https://www.exploit-db.com/exploits/37723/ (CNA: mitre; exploit, x_refsource_EXPLOIT-DB)

- https://kb.isc.org/article/AA-01305 (CNA: mitre; x_refsource_CONFIRM)

- http://rhn.redhat.com/errata/RHSA-2016-0078.html (CNA: mitre; vendor-advisory, x_refsource_REDHAT)

- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html (CNA: mitre; vendor-advisory, x_refsource_SUSE)

- https://kb.isc.org/article/AA-01306 (CNA: mitre; x_refsource_CONFIRM)

- https://kc.mcafee.com/corporate/index?page=content&id=SB10126 (CNA: mitre; x_refsource_CONFIRM)

- https://kb.isc.org/article/AA-01272 (CNA: mitre; x_refsource_CONFIRM)

- http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html (ADP: CVE; x_refsource_MISC, x_transferred)

- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html (ADP: CVE; vendor-advisory, x_refsource_SUSE, x_transferred)

- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- https://kb.juniper.net/JSA10783 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://rhn.redhat.com/errata/RHSA-2015-1513.html (ADP: CVE; vendor-advisory, x_refsource_REDHAT, x_transferred)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html (ADP: CVE; vendor-advisory, x_refsource_SUSE, x_transferred)

- https://security.netapp.com/advisory/ntap-20160114-0001/ (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- https://kb.isc.org/article/AA-01438 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html (ADP: CVE; vendor-advisory, x_refsource_FEDORA, x_transferred)

- http://marc.info/?l=bugtraq&m=144017354030745&w=2 (ADP: CVE; vendor-advisory, x_refsource_HP, x_transferred)

- http://marc.info/?l=bugtraq&m=144294073801304&w=2 (ADP: CVE; vendor-advisory, x_refsource_HP, x_transferred)

- http://rhn.redhat.com/errata/RHSA-2016-0079.html (ADP: CVE; vendor-advisory, x_refsource_REDHAT, x_transferred)

- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://rhn.redhat.com/errata/RHSA-2015-1514.html (ADP: CVE; vendor-advisory, x_refsource_REDHAT, x_transferred)

- http://www.ubuntu.com/usn/USN-2693-1 (ADP: CVE; vendor-advisory, x_refsource_UBUNTU, x_transferred)

- https://support.apple.com/kb/HT205032 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.securitytracker.com/id/1033100 (ADP: CVE; vdb-entry, x_refsource_SECTRACK, x_transferred)

- https://kb.isc.org/article/AA-01307 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.securityfocus.com/bid/76092 (ADP: CVE; vdb-entry, x_refsource_BID, x_transferred)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html (ADP: CVE; vendor-advisory, x_refsource_SUSE, x_transferred)

- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html (ADP: CVE; vendor-advisory, x_refsource_SUSE, x_transferred)

- https://www.exploit-db.com/exploits/37721/ (ADP: CVE; exploit, x_refsource_EXPLOIT-DB, x_transferred)

- http://rhn.redhat.com/errata/RHSA-2015-1515.html (ADP: CVE; vendor-advisory, x_refsource_REDHAT, x_transferred)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html (ADP: CVE; vendor-advisory, x_refsource_SUSE, x_transferred)

- https://security.gentoo.org/glsa/201510-01 (ADP: CVE; vendor-advisory, x_refsource_GENTOO, x_transferred)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html (ADP: CVE; vendor-advisory, x_refsource_SUSE, x_transferred)

- http://marc.info/?l=bugtraq&m=144181171013996&w=2 (ADP: CVE; vendor-advisory, x_refsource_HP, x_transferred)

- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://www.debian.org/security/2015/dsa-3319 (ADP: CVE; vendor-advisory, x_refsource_DEBIAN, x_transferred)

- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html (ADP: CVE; vendor-advisory, x_refsource_FEDORA, x_transferred)

- http://marc.info/?l=bugtraq&m=144000632319155&w=2 (ADP: CVE; vendor-advisory, x_refsource_HP, x_transferred)

- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html (ADP: CVE; vendor-advisory, x_refsource_FEDORA, x_transferred)

- https://www.exploit-db.com/exploits/37723/ (ADP: CVE; exploit, x_refsource_EXPLOIT-DB, x_transferred)

- https://kb.isc.org/article/AA-01305 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- http://rhn.redhat.com/errata/RHSA-2016-0078.html (ADP: CVE; vendor-advisory, x_refsource_REDHAT, x_transferred)

- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html (ADP: CVE; vendor-advisory, x_refsource_SUSE, x_transferred)

- https://kb.isc.org/article/AA-01306 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- https://kc.mcafee.com/corporate/index?page=content&id=SB10126 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- https://kb.isc.org/article/AA-01272 (ADP: CVE; x_refsource_CONFIRM, x_transferred)

- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5477 (ADP: CISA-ADP; government-resource)

- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718 (cve@mitre.org; Mitigation, Third Party Advisory)

- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html (cve@mitre.org; Mailing List, Third Party Advisory)

- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html (cve@mitre.org; Mailing List, Third Party Advisory)

- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html (cve@mitre.org; Mailing List, Third Party Advisory)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html (cve@mitre.org; Mailing List, Third Party Advisory)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html (cve@mitre.org; Mailing List, Third Party Advisory)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html (cve@mitre.org; Mailing List, Third Party Advisory)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html (cve@mitre.org; Mailing List, Third Party Advisory)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html (cve@mitre.org; Mailing List, Third Party Advisory)

- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html (cve@mitre.org; Mailing List, Third Party Advisory)

- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html (cve@mitre.org; Mailing List, Third Party Advisory)

- http://marc.info/?l=bugtraq&m=144000632319155&w=2 (cve@mitre.org; Mailing List, Third Party Advisory)

- http://marc.info/?l=bugtraq&m=144017354030745&w=2 (cve@mitre.org; Mailing List, Third Party Advisory)

- http://marc.info/?l=bugtraq&m=144181171013996&w=2 (cve@mitre.org; Mailing List, Third Party Advisory)

- http://marc.info/?l=bugtraq&m=144294073801304&w=2 (cve@mitre.org; Mailing List, Third Party Advisory)

- http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html (cve@mitre.org; Third Party Advisory, VDB Entry)

- http://rhn.redhat.com/errata/RHSA-2015-1513.html (cve@mitre.org; Third Party Advisory)

- http://rhn.redhat.com/errata/RHSA-2015-1514.html (cve@mitre.org; Third Party Advisory)

- http://rhn.redhat.com/errata/RHSA-2015-1515.html (cve@mitre.org; Third Party Advisory)

- http://rhn.redhat.com/errata/RHSA-2016-0078.html (cve@mitre.org; Third Party Advisory)

- http://rhn.redhat.com/errata/RHSA-2016-0079.html (cve@mitre.org; Third Party Advisory)

- http://www.debian.org/security/2015/dsa-3319 (cve@mitre.org; Mailing List, Third Party Advisory)

- http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html (cve@mitre.org; Third Party Advisory)

- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html (cve@mitre.org; Third Party Advisory)

- http://www.securityfocus.com/bid/76092 (cve@mitre.org; Third Party Advisory)

- http://www.securitytracker.com/id/1033100 (cve@mitre.org; Broken Link)

- http://www.ubuntu.com/usn/USN-2693-1 (cve@mitre.org; Third Party Advisory)

- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415 (cve@mitre.org; Third Party Advisory)

- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480 (cve@mitre.org; Third Party Advisory)

- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918 (cve@mitre.org; Third Party Advisory)

- https://kb.isc.org/article/AA-01272 (cve@mitre.org; Broken Link, Patch, Vendor Advisory)

- https://kb.isc.org/article/AA-01305 (cve@mitre.org; Broken Link)

- https://kb.isc.org/article/AA-01306 (cve@mitre.org; Broken Link)

- https://kb.isc.org/article/AA-01307 (cve@mitre.org; Broken Link)

- https://kb.isc.org/article/AA-01438 (cve@mitre.org; Broken Link)

- https://kb.juniper.net/JSA10783 (cve@mitre.org; Third Party Advisory)

- https://kc.mcafee.com/corporate/index?page=content&id=SB10126 (cve@mitre.org; Broken Link)

- https://security.gentoo.org/glsa/201510-01 (cve@mitre.org; Third Party Advisory)

- https://security.netapp.com/advisory/ntap-20160114-0001/ (cve@mitre.org; Third Party Advisory)

- https://support.apple.com/kb/HT205032 (cve@mitre.org; Third Party Advisory)

- https://www.exploit-db.com/exploits/37721/ (cve@mitre.org; Exploit, Third Party Advisory, VDB Entry)

- https://www.exploit-db.com/exploits/37723/ (cve@mitre.org; Third Party Advisory, VDB Entry)

- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718 (af854a3a-2127-422b-91ae-364da2661108; Mitigation, Third Party Advisory)

- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- http://marc.info/?l=bugtraq&m=144000632319155&w=2 (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- http://marc.info/?l=bugtraq&m=144017354030745&w=2 (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- http://marc.info/?l=bugtraq&m=144181171013996&w=2 (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- http://marc.info/?l=bugtraq&m=144294073801304&w=2 (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory, VDB Entry)

- http://rhn.redhat.com/errata/RHSA-2015-1513.html (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- http://rhn.redhat.com/errata/RHSA-2015-1514.html (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- http://rhn.redhat.com/errata/RHSA-2015-1515.html (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- http://rhn.redhat.com/errata/RHSA-2016-0078.html (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- http://rhn.redhat.com/errata/RHSA-2016-0079.html (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- http://www.debian.org/security/2015/dsa-3319 (af854a3a-2127-422b-91ae-364da2661108; Mailing List, Third Party Advisory)

- http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- http://www.securityfocus.com/bid/76092 (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- http://www.securitytracker.com/id/1033100 (af854a3a-2127-422b-91ae-364da2661108; Broken Link)

- http://www.ubuntu.com/usn/USN-2693-1 (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415 (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480 (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918 (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- https://kb.isc.org/article/AA-01272 (af854a3a-2127-422b-91ae-364da2661108; Broken Link, Patch, Vendor Advisory)

- https://kb.isc.org/article/AA-01305 (af854a3a-2127-422b-91ae-364da2661108; Broken Link)

- https://kb.isc.org/article/AA-01306 (af854a3a-2127-422b-91ae-364da2661108; Broken Link)

- https://kb.isc.org/article/AA-01307 (af854a3a-2127-422b-91ae-364da2661108; Broken Link)

- https://kb.isc.org/article/AA-01438 (af854a3a-2127-422b-91ae-364da2661108; Broken Link)

- https://kb.juniper.net/JSA10783 (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- https://kc.mcafee.com/corporate/index?page=content&id=SB10126 (af854a3a-2127-422b-91ae-364da2661108; Broken Link)

- https://security.gentoo.org/glsa/201510-01 (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- https://security.netapp.com/advisory/ntap-20160114-0001/ (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- https://support.apple.com/kb/HT205032 (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory)

- https://www.exploit-db.com/exploits/37721/ (af854a3a-2127-422b-91ae-364da2661108; Exploit, Third Party Advisory, VDB Entry)

- https://www.exploit-db.com/exploits/37723/ (af854a3a-2127-422b-91ae-364da2661108; Third Party Advisory, VDB Entry)

- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5477 (134c704f-9b21-4f2e-91b3-4a467353bcc0; US Government Resource)

## Provenance

- CNA: mitre: https://www.cve.org/CVERecord?id=CVE-2015-5477; retrieved 2026-11-04; source updated 2026-11-03

- NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-5477; retrieved 2026-11-04; source updated 2026-11-03

- CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog; retrieved 2026-11-02; source updated Not reported

- FIRST EPSS: https://api.first.org/data/v1/epss?cve=CVE-2015-5477; retrieved 2026-11-03; source updated Not reported

Revision: 33fd55ccc577007f98b354e0f26cb7bf21f08d04cda465f6f8af22d921f8ccb2

Canonical: https://y2.dev/cve/CVE-2015-5477

## Agent and API access

Public CVE pages, Markdown, and JSON are free to read without an account or API key.

- Public catalog: https://y2.dev/cve/index.json. Follow nextCursor with the same search, filters, sort, and limit (1–100). A null cursor marks the end.

- WebMCP: search_cve_disclosures, get_cve_disclosure, get_cve_page_markdown, get_y2_cve_access. Available in compatible browsers.

- Cyber API: https://api.y2.dev/api/v2/cyber/cves and https://api.y2.dev/api/v2/cyber/cves/{cveId}.

- Y2 Pro or Elite: create a workspace API key with the intel:cyber scope and send Authorization: Bearer <Y2_API_KEY>. Setup: https://y2.dev/docs/api/create-key.

- x402: Pay per request without an account or API key. Omit Authorization, read the HTTP 402 PAYMENT-REQUIRED challenge, validate its current requirements, and retry with PAYMENT-SIGNATURE through an authorized payment client. These browser tools never make payments. Guide: https://y2.dev/docs/api/x402.

- OpenAPI: https://y2.dev/api/openapi.yaml. Agent access metadata: https://y2.dev/cve/agent.json.

Collected public records only. Check source status for coverage and freshness.