CVE-2015-5477
None CISA KEVCVSS
—
EPSS
99.6%
Published
Jul 29, 2015
CISA due date
Oct 11, 2026
The record
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | bind9 | 0 | 1:9.9.5.dfsg-11 |
| Debian:12 | bind9 | 0 | 1:9.9.5.dfsg-11 |
| Debian:13 | bind9 | 0 | 1:9.9.5.dfsg-11 |
| Debian:6.0 | bind9 | 0 | 1:9.7.3.dfsg-1~squeeze16 |
| Debian:7 | bind9 | 0 | 1:9.8.4.dfsg.P1-6+nmu2+deb7u6 |
| Debian:8 | bind9 | 0 | 1:9.9.5.dfsg-9+deb8u2 |
| Mageia:4 | bind | 0 | 9.9.7.P2-1.mga4 |
| Mageia:5 | bind | 0 | 9.10.2.P3-1.mga5 |
| Red Hat:enterprise_linux:5::client | bind | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::client | bind-chroot | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::client | bind-debuginfo | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::client | bind-devel | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::client | bind-libbind-devel | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::client | bind-libs | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::client | bind-sdb | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::client | bind-utils | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::client | caching-nameserver | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::client_workstation | bind | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::client_workstation | bind-chroot | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::client_workstation | bind-debuginfo | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::client_workstation | bind-devel | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::client_workstation | bind-libbind-devel | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::client_workstation | bind-libs | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::client_workstation | bind-sdb | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::client_workstation | bind-utils | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::client_workstation | bind97 | 0 | 32:9.7.0-21.P2.el5_11.2 |
| Red Hat:enterprise_linux:5::client_workstation | bind97-chroot | 0 | 32:9.7.0-21.P2.el5_11.2 |
| Red Hat:enterprise_linux:5::client_workstation | bind97-debuginfo | 0 | 32:9.7.0-21.P2.el5_11.2 |
| Red Hat:enterprise_linux:5::client_workstation | bind97-devel | 0 | 32:9.7.0-21.P2.el5_11.2 |
| Red Hat:enterprise_linux:5::client_workstation | bind97-libs | 0 | 32:9.7.0-21.P2.el5_11.2 |
| Red Hat:enterprise_linux:5::client_workstation | bind97-utils | 0 | 32:9.7.0-21.P2.el5_11.2 |
| Red Hat:enterprise_linux:5::client_workstation | caching-nameserver | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::server | bind | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::server | bind-chroot | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::server | bind-debuginfo | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::server | bind-devel | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::server | bind-libbind-devel | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::server | bind-libs | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::server | bind-sdb | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::server | bind-utils | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:5::server | bind97 | 0 | 32:9.7.0-21.P2.el5_11.2 |
| Red Hat:enterprise_linux:5::server | bind97-chroot | 0 | 32:9.7.0-21.P2.el5_11.2 |
| Red Hat:enterprise_linux:5::server | bind97-debuginfo | 0 | 32:9.7.0-21.P2.el5_11.2 |
| Red Hat:enterprise_linux:5::server | bind97-devel | 0 | 32:9.7.0-21.P2.el5_11.2 |
| Red Hat:enterprise_linux:5::server | bind97-libs | 0 | 32:9.7.0-21.P2.el5_11.2 |
| Red Hat:enterprise_linux:5::server | bind97-utils | 0 | 32:9.7.0-21.P2.el5_11.2 |
| Red Hat:enterprise_linux:5::server | caching-nameserver | 0 | 30:9.3.6-25.P1.el5_11.3 |
| Red Hat:enterprise_linux:6::client | bind | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::client | bind-chroot | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::client | bind-debuginfo | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::client | bind-devel | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::client | bind-libs | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::client | bind-sdb | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::client | bind-utils | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::computenode | bind | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::computenode | bind-chroot | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::computenode | bind-debuginfo | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::computenode | bind-devel | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::computenode | bind-libs | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::computenode | bind-sdb | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::computenode | bind-utils | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::server | bind | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::server | bind-chroot | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::server | bind-debuginfo | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::server | bind-devel | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::server | bind-libs | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::server | bind-sdb | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::server | bind-utils | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::workstation | bind | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::workstation | bind-chroot | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::workstation | bind-debuginfo | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::workstation | bind-devel | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::workstation | bind-libs | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::workstation | bind-sdb | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:6::workstation | bind-utils | 0 | 32:9.8.2-0.37.rc1.el6_7.2 |
| Red Hat:enterprise_linux:7::client | bind | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::client | bind-chroot | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::client | bind-debuginfo | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::client | bind-devel | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::client | bind-libs | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::client | bind-libs-lite | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::client | bind-license | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::client | bind-lite-devel | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::client | bind-sdb | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::client | bind-sdb-chroot | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::client | bind-utils | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::computenode | bind | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::computenode | bind-chroot | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::computenode | bind-debuginfo | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::computenode | bind-devel | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::computenode | bind-libs | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::computenode | bind-libs-lite | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::computenode | bind-license | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::computenode | bind-lite-devel | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::computenode | bind-sdb | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::computenode | bind-sdb-chroot | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::computenode | bind-utils | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::server | bind | 0 | 32:9.9.4-18.ael7b_1.3 |
| Red Hat:enterprise_linux:7::server | bind-chroot | 0 | 32:9.9.4-18.ael7b_1.3 |
| Red Hat:enterprise_linux:7::server | bind-debuginfo | 0 | 32:9.9.4-18.ael7b_1.3 |
| Red Hat:enterprise_linux:7::server | bind-devel | 0 | 32:9.9.4-18.ael7b_1.3 |
| Red Hat:enterprise_linux:7::server | bind-libs | 0 | 32:9.9.4-18.ael7b_1.3 |
| Red Hat:enterprise_linux:7::server | bind-libs-lite | 0 | 32:9.9.4-18.ael7b_1.3 |
| Red Hat:enterprise_linux:7::server | bind-license | 0 | 32:9.9.4-18.ael7b_1.3 |
| Red Hat:enterprise_linux:7::server | bind-lite-devel | 0 | 32:9.9.4-18.ael7b_1.3 |
| Red Hat:enterprise_linux:7::server | bind-sdb | 0 | 32:9.9.4-18.ael7b_1.3 |
| Red Hat:enterprise_linux:7::server | bind-sdb-chroot | 0 | 32:9.9.4-18.ael7b_1.3 |
| Red Hat:enterprise_linux:7::server | bind-utils | 0 | 32:9.9.4-18.ael7b_1.3 |
| Red Hat:enterprise_linux:7::workstation | bind | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::workstation | bind-chroot | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::workstation | bind-debuginfo | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::workstation | bind-devel | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::workstation | bind-libs | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::workstation | bind-libs-lite | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::workstation | bind-license | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::workstation | bind-lite-devel | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::workstation | bind-sdb | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::workstation | bind-sdb-chroot | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:enterprise_linux:7::workstation | bind-utils | 0 | 32:9.9.4-18.el7_1.3 |
| Red Hat:rhel_aus:6.4::server | bind | 0 | 32:9.8.2-0.17.rc1.el6_4.7 |
| Red Hat:rhel_aus:6.4::server | bind-chroot | 0 | 32:9.8.2-0.17.rc1.el6_4.7 |
| Red Hat:rhel_aus:6.4::server | bind-debuginfo | 0 | 32:9.8.2-0.17.rc1.el6_4.7 |
| Red Hat:rhel_aus:6.4::server | bind-devel | 0 | 32:9.8.2-0.17.rc1.el6_4.7 |
| Red Hat:rhel_aus:6.4::server | bind-libs | 0 | 32:9.8.2-0.17.rc1.el6_4.7 |
| Red Hat:rhel_aus:6.4::server | bind-sdb | 0 | 32:9.8.2-0.17.rc1.el6_4.7 |
| Red Hat:rhel_aus:6.4::server | bind-utils | 0 | 32:9.8.2-0.17.rc1.el6_4.7 |
| Red Hat:rhel_aus:6.5::server | bind | 0 | 32:9.8.2-0.23.rc1.el6_5.2 |
| Red Hat:rhel_aus:6.5::server | bind-chroot | 0 | 32:9.8.2-0.23.rc1.el6_5.2 |
| Red Hat:rhel_aus:6.5::server | bind-debuginfo | 0 | 32:9.8.2-0.23.rc1.el6_5.2 |
| Red Hat:rhel_aus:6.5::server | bind-devel | 0 | 32:9.8.2-0.23.rc1.el6_5.2 |
| Red Hat:rhel_aus:6.5::server | bind-libs | 0 | 32:9.8.2-0.23.rc1.el6_5.2 |
| Red Hat:rhel_aus:6.5::server | bind-sdb | 0 | 32:9.8.2-0.23.rc1.el6_5.2 |
| Red Hat:rhel_aus:6.5::server | bind-utils | 0 | 32:9.8.2-0.23.rc1.el6_5.2 |
| Red Hat:rhel_eus:6.6::computenode | bind | 0 | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat:rhel_eus:6.6::computenode | bind-chroot | 0 | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat:rhel_eus:6.6::computenode | bind-debuginfo | 0 | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat:rhel_eus:6.6::computenode | bind-devel | 0 | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat:rhel_eus:6.6::computenode | bind-libs | 0 | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat:rhel_eus:6.6::computenode | bind-sdb | 0 | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat:rhel_eus:6.6::computenode | bind-utils | 0 | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat:rhel_eus:6.6::server | bind | 0 | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat:rhel_eus:6.6::server | bind-chroot | 0 | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat:rhel_eus:6.6::server | bind-debuginfo | 0 | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat:rhel_eus:6.6::server | bind-devel | 0 | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat:rhel_eus:6.6::server | bind-libs | 0 | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat:rhel_eus:6.6::server | bind-sdb | 0 | 32:9.8.2-0.30.rc1.el6_6.4 |
| Red Hat:rhel_eus:6.6::server | bind-utils | 0 | 32:9.8.2-0.30.rc1.el6_6.4 |
| SUSE:Linux Enterprise Desktop 11 SP3 | bind | 0 | 9.9.6P1-0.12.1 |
| SUSE:Linux Enterprise Desktop 11 SP4 | bind | 0 | 9.9.6P1-0.12.1 |
| SUSE:Linux Enterprise Desktop 12 | bind | 0 | 9.9.6P1-23.1 |
| SUSE:Linux Enterprise Server 11 SP1-LTSS | bind | 0 | 9.6ESVR11W1-0.6.1 |
| SUSE:Linux Enterprise Server 11 SP1-TERADATA | bind | 0 | 9.6ESVR11W1-0.6.1 |
| SUSE:Linux Enterprise Server 11 SP2-LTSS | bind | 0 | 9.9.6P1-0.12.1 |
| SUSE:Linux Enterprise Server 11 SP3 | bind | 0 | 9.9.6P1-0.12.1 |
| SUSE:Linux Enterprise Server 11 SP3-TERADATA | bind | 0 | 9.9.6P1-0.12.1 |
| SUSE:Linux Enterprise Server 11 SP4 | bind | 0 | 9.9.6P1-0.12.1 |
| SUSE:Linux Enterprise Server 12 | bind | 0 | 9.9.6P1-23.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP3 | bind | 0 | 9.9.6P1-0.12.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | bind | 0 | 9.9.6P1-0.12.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 | bind | 0 | 9.9.6P1-23.1 |
| SUSE:Linux Enterprise Software Development Kit 11 SP3 | bind | 0 | 9.9.6P1-0.12.1 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | bind | 0 | 9.9.6P1-0.12.1 |
| SUSE:Linux Enterprise Software Development Kit 12 | bind | 0 | 9.9.6P1-23.1 |
| Ubuntu:14.04:LTS | bind9 | 0 | 1:9.9.5.dfsg-3ubuntu0.4 |
| openSUSE:Tumbleweed | bind | 0 | 9.10.3P4-21.1 |
Related vulnerabilities
- CVE-2025-40775 When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND… Also affects bind9
- CVE-2024-11187 It is possible to construct a zone such that some queries to it will generate responses… Also affects bind9
- CVE-2024-12705 Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by… Also affects bind9
- CVE-2024-4076 Client queries that trigger serving stale data and that also require lookups in local… Also affects bind9
- CVE-2024-1737 Resolver caches and authoritative zone databases that hold significant numbers of RRs for… Also affects bind9
- CVE-2024-1975 If a server hosts a zone containing a "KEY" Resource Record, or a resolver… Also affects bind9
- CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… Also affects bind9
- CVE-2023-2911 If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both… Also affects bind9