named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
CVE-2015-5477
CVSS base score
7.5 (v3.1)
Severity
HIGH
Attack vector
Network
Weakness
CWE-19, CWE-617
Last modified
November 3, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
juniper junos
fedoraproject fedora
redhat enterprise linux
redhat enterprise linux aus
debian debian linux
oracle vm server
oracle solaris
hp hp-ux
canonical ubuntu linux
netapp clustered data ontap
References
- kb.juniper.net Mitigation, Third Party Advisory
- lists.fedoraproject.org Mailing List, Third Party Advisory
- lists.fedoraproject.org Mailing List, Third Party Advisory
- lists.fedoraproject.org Mailing List, Third Party Advisory
- lists.opensuse.org Mailing List, Third Party Advisory
- lists.opensuse.org Mailing List, Third Party Advisory
- lists.opensuse.org Mailing List, Third Party Advisory
- lists.opensuse.org Mailing List, Third Party Advisory
- lists.opensuse.org Mailing List, Third Party Advisory
- lists.opensuse.org Mailing List, Third Party Advisory