{"schema":"threatline.record/2","record":{"id":"CVE-2015-5477","aliases":[],"summary":" ISC BIND Data Processing Errors Vulnerability","details":"ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.","categories":["Unclassified"],"product":"BIND","vendor":"ISC","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2015-5477","source_modified_at":"2026-10-09T03:55:29.574Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}],"defaultStatus":null}],"fixed_versions":[],"cvss":7.5,"severity":"High","kev":{"listed":true,"date_added":"2026-10-08","due_date":"2026-10-11","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.99409,"percentile":0.99942,"score_date":"2026-10-23"},"published_at":"2015-07-29T14:00:00.000Z","modified_at":"2026-10-09T03:55:29.574Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2015-5477","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-09T03:55:29.574Z"},{"source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/dns/bind_tkey.rb","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2015-07-28"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/37721","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2015-08-01"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/37723","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2015-08-05"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2015-5477","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","Metasploit","Exploit-DB","EPSS"],"references":[{"url":"https://access.redhat.com/errata/RHSA-2015:1513.html","source":"CISA KEV"},{"url":"https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477","source":"CISA KEV"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5477","source":"CISA KEV"},{"source":"CVE List","url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://kb.juniper.net/JSA10783","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://security.netapp.com/advisory/ntap-20160114-0001/","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://kb.isc.org/article/AA-01438","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://support.apple.com/kb/HT205032","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://kb.isc.org/article/AA-01307","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://www.exploit-db.com/exploits/37721/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"source":"CVE List","url":"https://security.gentoo.org/glsa/201510-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"source":"CVE List","url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://www.exploit-db.com/exploits/37723/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"source":"CVE List","url":"https://kb.isc.org/article/AA-01305","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://kb.isc.org/article/AA-01306","tags":["x_refsource_CONFIRM"]},{"source":"CVE List","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10126","tags":["x_refsource_CONFIRM"]},{"source":"CVE List","url":"https://kb.isc.org/article/AA-01272","tags":["x_refsource_CONFIRM"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5477","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CISA ADP","ssvc":{"exploitation":"active","automatable":"yes","technical_impact":"total","assessed_at":"2026-10-08T00:00:00+00:00"},"exploits":[{"source":"Metasploit","kind":"Auxiliary module","name":"BIND TKEY Query Denial of Service","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/dns/bind_tkey.rb","date":"2015-07-28","added":"2025-05-15","check":false},{"source":"Exploit-DB","kind":"Dos exploit","name":"ISC BIND 9 - TKEY (PoC)","url":"https://www.exploit-db.com/exploits/37721","date":"2015-08-01","added":"2015-08-01","verified":true},{"source":"Exploit-DB","kind":"Dos exploit","name":"ISC BIND 9 - TKEY Remote Denial of Service (PoC)","url":"https://www.exploit-db.com/exploits/37723","date":"2015-08-05","added":"2015-08-05","verified":false}],"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-09T03:55:29.574Z","content_hash":"5a140a88b9e9724b432f917e055e5e985dfabef9947ff4138a07cc56d5e9241c"}}