[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2015-5477":6},{"stargazers_count":4,"fetched_at":5},8,"2026-10-08T19:15:20.587Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":25,"aliases":67,"duplicate_of":9,"upstream":69,"downstream":70,"duplicates":100,"related":101,"reserved_at":9,"published_at":107,"modified_at":108,"state":109,"summary":110,"references_raw":119,"kevs":316,"epss":327,"epss_history":329,"metrics":527,"affected":541},"CVE-2015-5477","named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.",null,[11,18],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"CWE-19","Data Processing Errors","Weaknesses in this category are typically found in functionality that processes data. Data processing is the manipulation of input to retrieve or save information.","category","Draft",[],{"_key":19,"id":19,"name":20,"description":21,"type":22,"status":16,"abstraction":23,"likelihood_of_exploit":9,"capec":24},"CWE-617","Reachable Assertion","The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.","weakness","Base",[],[26,40,51],{"_key":27,"name":28,"source":29,"url":30,"maturity":31,"reliability_score":32,"verified":33,"type":34,"platforms":35,"requires_auth":9,"exploitdb":37,"metasploit":9},"37721","ISC BIND 9 - TKEY (PoC)","exploit-database","https://www.exploit-db.com/exploits/37721","poc",0.8,true,"dos",[36],"multiple",{"verified":33,"type":34,"platform":36,"file":38,"codes":39},"exploits/multiple/dos/37721.c",[7],{"_key":41,"name":42,"source":29,"url":43,"maturity":31,"reliability_score":44,"verified":45,"type":34,"platforms":46,"requires_auth":9,"exploitdb":47,"metasploit":9},"37723","ISC BIND 9 - TKEY Remote Denial of Service (PoC)","https://www.exploit-db.com/exploits/37723",0.5,false,[36],{"verified":45,"type":34,"platform":36,"file":48,"codes":49},"exploits/multiple/dos/37723.py",[7,50],"OSVDB-125438",{"_key":52,"name":53,"source":54,"url":55,"maturity":31,"reliability_score":44,"verified":45,"type":56,"platforms":57,"requires_auth":45,"exploitdb":9,"metasploit":58},"MSF_AUXILIARY_DOS_DNS_BIND_TKEY","BIND TKEY Query Denial of Service","metasploit","https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/dns/bind_tkey.rb","remote",[],{"fullname":59,"rank":60,"rank_name":61,"post_auth":45,"check":45,"notes":62},"auxiliary/dos/dns/bind_tkey",300,"normal",{"Stability":63,"SideEffects":65,"Reliability":66},[64],"crash-service-down",[],[],[68],"DEBIAN-CVE-2015-5477",[],[71,73,75,77,79,81,83,85,87,89,90,92,94,96,98],{"_key":72},"SUSE-SU-2015:1304-1",{"_key":74},"SUSE-SU-2015:1316-1",{"_key":76},"SUSE-SU-2015:1305-1",{"_key":78},"OPENSUSE-SU-2024:10467-1",{"_key":80},"DLA-285-1",{"_key":82},"DSA-3319-1",{"_key":84},"MGASA-2015-0298",{"_key":86},"UBUNTU-CVE-2015-5477",{"_key":88},"USN-2693-1",{"_key":68},{"_key":91},"RHSA-2015:1513",{"_key":93},"RHSA-2015:1514",{"_key":95},"RHSA-2015:1515",{"_key":97},"RHSA-2016:0078",{"_key":99},"RHSA-2016:0079",[],[102,103,104,105,106],{"_key":72},{"_key":74},{"_key":76},{"_key":78},{"_key":84},"2015-07-29T14:00:00.000Z","2026-10-08T19:58:23.638Z","Modified",{"cisa_kev":33,"cisa_ransomware":45,"cisa_vendor":111,"epss_severity":112,"epss_score":113,"severity":114,"severity_score":115,"severity_version":116,"severity_source":117,"severity_vector":118,"severity_status":109},"ISC","critical",0.91284,"high",7.8,"v2.0","nvd","AV:N/AC:L/Au:N/C:N/I:N/A:C",[120,126,131,137,141,145,150,154,158,162,167,172,176,180,184,188,192,196,201,205,211,215,220,224,228,234,238,242,247,251,255,259,264,268,272,276,280,284,288,292,296,300,305,311],{"url":121,"sources":122,"tags":124},"http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html",[123,117],"cve.org",[125],"X Refsource MISC",{"url":127,"sources":128,"tags":129},"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",[123,117],[130],"X Refsource CONFIRM",{"url":132,"sources":133,"tags":134},"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html",[123,117],[135,136],"Vendor Advisory","X Refsource SUSE",{"url":138,"sources":139,"tags":140},"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415",[123,117],[130],{"url":142,"sources":143,"tags":144},"https://kb.juniper.net/JSA10783",[123,117],[130],{"url":146,"sources":147,"tags":148},"http://rhn.redhat.com/errata/RHSA-2015-1513.html",[123,117],[135,149],"X Refsource REDHAT",{"url":151,"sources":152,"tags":153},"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html",[123,117],[135,136],{"url":155,"sources":156,"tags":157},"https://security.netapp.com/advisory/ntap-20160114-0001/",[123,117],[130],{"url":159,"sources":160,"tags":161},"https://kb.isc.org/article/AA-01438",[123,117],[130],{"url":163,"sources":164,"tags":165},"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html",[123,117],[135,166],"X Refsource FEDORA",{"url":168,"sources":169,"tags":170},"http://marc.info/?l=bugtraq&m=144017354030745&w=2",[123,117],[135,171],"X Refsource HP",{"url":173,"sources":174,"tags":175},"http://marc.info/?l=bugtraq&m=144294073801304&w=2",[123,117],[135,171],{"url":177,"sources":178,"tags":179},"http://rhn.redhat.com/errata/RHSA-2016-0079.html",[123,117],[135,149],{"url":181,"sources":182,"tags":183},"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918",[123,117],[130],{"url":185,"sources":186,"tags":187},"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html",[123,117],[130],{"url":189,"sources":190,"tags":191},"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718",[123,117],[130],{"url":193,"sources":194,"tags":195},"http://rhn.redhat.com/errata/RHSA-2015-1514.html",[123,117],[135,149],{"url":197,"sources":198,"tags":199},"http://www.ubuntu.com/usn/USN-2693-1",[123,117],[135,200],"X Refsource UBUNTU",{"url":202,"sources":203,"tags":204},"https://support.apple.com/kb/HT205032",[123,117],[130],{"url":206,"sources":207,"tags":208},"http://www.securitytracker.com/id/1033100",[123,117],[209,210],"VDB Entry","X Refsource SECTRACK",{"url":212,"sources":213,"tags":214},"https://kb.isc.org/article/AA-01307",[123,117],[130],{"url":216,"sources":217,"tags":218},"http://www.securityfocus.com/bid/76092",[123,117],[209,219],"X Refsource BID",{"url":221,"sources":222,"tags":223},"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html",[123,117],[135,136],{"url":225,"sources":226,"tags":227},"http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html",[123,117],[135,136],{"url":229,"sources":230,"tags":231},"https://www.exploit-db.com/exploits/37721/",[123,117],[232,233],"Exploit","X Refsource EXPLOIT DB",{"url":235,"sources":236,"tags":237},"http://rhn.redhat.com/errata/RHSA-2015-1515.html",[123,117],[135,149],{"url":239,"sources":240,"tags":241},"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html",[123,117],[135,136],{"url":243,"sources":244,"tags":245},"https://security.gentoo.org/glsa/201510-01",[123,117],[135,246],"X Refsource GENTOO",{"url":248,"sources":249,"tags":250},"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html",[123,117],[135,136],{"url":252,"sources":253,"tags":254},"http://marc.info/?l=bugtraq&m=144181171013996&w=2",[123,117],[135,171],{"url":256,"sources":257,"tags":258},"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480",[123,117],[130],{"url":260,"sources":261,"tags":262},"http://www.debian.org/security/2015/dsa-3319",[123,117],[135,263],"X Refsource DEBIAN",{"url":265,"sources":266,"tags":267},"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html",[123,117],[135,166],{"url":269,"sources":270,"tags":271},"http://marc.info/?l=bugtraq&m=144000632319155&w=2",[123,117],[135,171],{"url":273,"sources":274,"tags":275},"http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html",[123,117],[135,166],{"url":277,"sources":278,"tags":279},"https://www.exploit-db.com/exploits/37723/",[123,117],[232,233],{"url":281,"sources":282,"tags":283},"https://kb.isc.org/article/AA-01305",[123,117],[130],{"url":285,"sources":286,"tags":287},"http://rhn.redhat.com/errata/RHSA-2016-0078.html",[123,117],[135,149],{"url":289,"sources":290,"tags":291},"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html",[123,117],[135,136],{"url":293,"sources":294,"tags":295},"https://kb.isc.org/article/AA-01306",[123,117],[130],{"url":297,"sources":298,"tags":299},"https://kc.mcafee.com/corporate/index?page=content&id=SB10126",[123,117],[130],{"url":301,"sources":302,"tags":303},"https://kb.isc.org/article/AA-01272",[123,117],[130,304,135],"Patch",{"url":306,"sources":307,"tags":309},"https://security-tracker.debian.org/tracker/CVE-2015-5477",[308],"osv_debian",[310],"Advisory",{"url":312,"sources":313,"tags":314},"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5477",[123,117],[315],"Government Resource",[317],{"source":318,"vendor":111,"product":319,"date_added":320,"vulnerability_name":321,"short_description":322,"required_action":323,"due_date":324,"known_ransomware_campaign_use":325,"notes":326,"exploitation_type":9},"cisa","BIND","2026-10-08"," ISC BIND Data Processing Errors Vulnerability","ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","2026-10-11","Unknown","This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272 ; https://access.redhat.com/errata/RHSA-2015:1513.html; https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-5477",{"date":320,"score":113,"percentile":328},0.9981,[330,334,336,338,341,343,345,347,349,351,353,355,357,359,362,365,368,370,373,375,377,379,381,383,385,387,389,391,395,397,399,403,406,408,410,413,415,417,419,421,423,425,427,429,431,433,435,437,439,441,443,445,447,449,452,454,456,458,460,463,465,467,469,471,473,475,477,479,481,483,485,487,489,491,493,495,497,499,501,503,505,507,509,511,513,515,517,519,522,524],{"date":331,"score":332,"percentile":333},"2025-11-04",0.92832,0.99753,{"date":335,"score":332,"percentile":333},"2025-11-05",{"date":337,"score":332,"percentile":333},"2025-11-06",{"date":339,"score":332,"percentile":340},"2025-11-07",0.99752,{"date":342,"score":332,"percentile":340},"2025-11-08",{"date":344,"score":332,"percentile":340},"2025-11-09",{"date":346,"score":332,"percentile":333},"2025-11-10",{"date":348,"score":332,"percentile":340},"2025-11-11",{"date":350,"score":332,"percentile":340},"2025-11-12",{"date":352,"score":332,"percentile":340},"2025-11-13",{"date":354,"score":332,"percentile":340},"2025-11-14",{"date":356,"score":332,"percentile":340},"2025-11-15",{"date":358,"score":332,"percentile":333},"2025-11-16",{"date":360,"score":332,"percentile":361},"2025-11-17",0.99754,{"date":363,"score":332,"percentile":364},"2025-11-18",0.99826,{"date":366,"score":332,"percentile":367},"2025-11-19",0.99825,{"date":369,"score":332,"percentile":367},"2025-11-20",{"date":371,"score":332,"percentile":372},"2025-11-21",0.99751,{"date":374,"score":332,"percentile":340},"2025-11-22",{"date":376,"score":332,"percentile":340},"2025-11-23",{"date":378,"score":332,"percentile":340},"2025-11-24",{"date":380,"score":332,"percentile":333},"2025-11-25",{"date":382,"score":332,"percentile":333},"2025-11-26",{"date":384,"score":332,"percentile":372},"2025-11-27",{"date":386,"score":332,"percentile":340},"2025-11-28",{"date":388,"score":332,"percentile":333},"2025-11-29",{"date":390,"score":332,"percentile":333},"2025-11-30",{"date":392,"score":393,"percentile":394},"2025-12-01",0.92219,0.99707,{"date":396,"score":393,"percentile":394},"2025-12-02",{"date":398,"score":393,"percentile":394},"2025-12-03",{"date":400,"score":401,"percentile":402},"2025-12-04",0.92752,0.99744,{"date":404,"score":401,"percentile":405},"2025-12-05",0.99745,{"date":407,"score":401,"percentile":405},"2025-12-06",{"date":409,"score":401,"percentile":405},"2025-12-07",{"date":411,"score":401,"percentile":412},"2025-12-08",0.99746,{"date":414,"score":401,"percentile":412},"2025-12-09",{"date":416,"score":401,"percentile":412},"2025-12-10",{"date":418,"score":401,"percentile":405},"2025-12-11",{"date":420,"score":401,"percentile":405},"2025-12-12",{"date":422,"score":401,"percentile":412},"2025-12-13",{"date":424,"score":401,"percentile":405},"2025-12-14",{"date":426,"score":401,"percentile":405},"2025-12-15",{"date":428,"score":401,"percentile":412},"2025-12-16",{"date":430,"score":401,"percentile":412},"2025-12-17",{"date":432,"score":401,"percentile":405},"2025-12-18",{"date":434,"score":401,"percentile":405},"2025-12-19",{"date":436,"score":401,"percentile":412},"2025-12-20",{"date":438,"score":401,"percentile":412},"2025-12-21",{"date":440,"score":401,"percentile":412},"2025-12-22",{"date":442,"score":401,"percentile":412},"2025-12-23",{"date":444,"score":401,"percentile":405},"2025-12-24",{"date":446,"score":401,"percentile":405},"2025-12-25",{"date":448,"score":401,"percentile":402},"2025-12-26",{"date":450,"score":401,"percentile":451},"2025-12-27",0.99743,{"date":453,"score":401,"percentile":402},"2025-12-28",{"date":455,"score":401,"percentile":402},"2025-12-29",{"date":457,"score":401,"percentile":402},"2025-12-30",{"date":459,"score":401,"percentile":402},"2025-12-31",{"date":461,"score":393,"percentile":462},"2026-01-01",0.99709,{"date":464,"score":393,"percentile":462},"2026-01-02",{"date":466,"score":393,"percentile":462},"2026-01-03",{"date":468,"score":401,"percentile":451},"2026-01-04",{"date":470,"score":401,"percentile":451},"2026-01-05",{"date":472,"score":401,"percentile":451},"2026-01-06",{"date":474,"score":401,"percentile":402},"2026-01-07",{"date":476,"score":401,"percentile":402},"2026-01-08",{"date":478,"score":401,"percentile":402},"2026-01-09",{"date":480,"score":401,"percentile":402},"2026-01-10",{"date":482,"score":401,"percentile":451},"2026-01-11",{"date":484,"score":401,"percentile":451},"2026-01-12",{"date":486,"score":401,"percentile":451},"2026-01-13",{"date":488,"score":401,"percentile":402},"2026-01-14",{"date":490,"score":401,"percentile":405},"2026-01-15",{"date":492,"score":401,"percentile":405},"2026-01-16",{"date":494,"score":401,"percentile":412},"2026-01-17",{"date":496,"score":401,"percentile":412},"2026-01-18",{"date":498,"score":401,"percentile":412},"2026-01-19",{"date":500,"score":401,"percentile":412},"2026-01-20",{"date":502,"score":401,"percentile":412},"2026-01-21",{"date":504,"score":401,"percentile":405},"2026-01-22",{"date":506,"score":401,"percentile":412},"2026-01-23",{"date":508,"score":401,"percentile":412},"2026-01-24",{"date":510,"score":401,"percentile":412},"2026-01-25",{"date":512,"score":401,"percentile":412},"2026-01-26",{"date":514,"score":401,"percentile":412},"2026-01-27",{"date":516,"score":401,"percentile":412},"2026-01-28",{"date":518,"score":401,"percentile":412},"2026-01-29",{"date":520,"score":401,"percentile":521},"2026-01-30",0.99747,{"date":523,"score":401,"percentile":521},"2026-01-31",{"date":525,"score":393,"percentile":526},"2026-02-01",0.99713,[528,537,539],{"source":117,"cvss_v2_0":529,"cvss_v3_0":9,"cvss_v3_1":532,"cvss_v4_0":9},{"baseScore":115,"baseSeverity":9,"vectorString":118,"impactScore":530,"exploitabilityScore":531},6.9,10,{"baseScore":533,"baseSeverity":534,"vectorString":535,"impactScore":536,"exploitabilityScore":531},7.5,"HIGH","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",6,{"source":123,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":538,"cvss_v4_0":9},{"baseScore":533,"baseSeverity":534,"vectorString":535,"impactScore":536,"exploitabilityScore":531},{"source":308,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":540,"cvss_v4_0":9},{"baseScore":533,"baseSeverity":9,"vectorString":535,"impactScore":536,"exploitabilityScore":531},[542,556],{"ecosystem":543,"name":544,"vendor":545,"product":544,"cpe_part":9,"purl_type":546,"purl_namespace":545,"purl_name":544,"source":9,"versions":547},"Debian","bind9","debian","deb",[548,553,554,555],{"version":549,"is_range":33,"range_type":550,"version_start":9,"version_start_type":9,"version_end":551,"version_end_type":552,"fixed_in":9},"lt1:9_9_5_dfsg_11","ecosystem","1:9.9.5.dfsg-11","excluding",{"version":549,"is_range":33,"range_type":550,"version_start":9,"version_start_type":9,"version_end":551,"version_end_type":552,"fixed_in":9},{"version":549,"is_range":33,"range_type":550,"version_start":9,"version_start_type":9,"version_end":551,"version_end_type":552,"fixed_in":9},{"version":549,"is_range":33,"range_type":550,"version_start":9,"version_start_type":9,"version_end":551,"version_end_type":552,"fixed_in":9},{"ecosystem":9,"name":319,"vendor":557,"product":558,"cpe_part":559,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":560},"isc","bind","a",[561,566],{"version":562,"is_range":33,"range_type":563,"version_start":9,"version_start_type":9,"version_end":564,"version_end_type":565,"fixed_in":9},"lte9.9.7","cpe","9.9.7","including",{"version":567,"is_range":33,"range_type":563,"version_start":9,"version_start_type":9,"version_end":568,"version_end_type":565,"fixed_in":9},"lte9.10.2","9.10.2"]