HIGHCVSS 7.5Vulnerability

CVE-2015-5477

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

Properties

severity
HIGH
product
BIND
vulnerabilityName
ISC BIND Data Processing Errors Vulnerability
cvss_severity
HIGH
cvss_score
7.5
dueDate
2026-10-11
retrieved_at
2026-10-08T19:23:25+00:00
requiredAction
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discon
dateAdded
2026-10-08
last_source
NVD
score
7.5
cve_id
CVE-2015-5477
cvss_vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
signal_observed_at
2026-10-08T19:23:25+00:00
vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendorProject
ISC
published_at
2015-07-29T14:59:05.397
last_modified
2026-10-08T18:17:11.250

Related Entities (6)

HAS_WEAKNESS (2)

→[Weakness]
→[Weakness]Reachable Assertion

DESCRIBED_BY (1)

→[Source]NVD

AFFECTS_PRODUCT (2)

→[Product]
→[Product]

KNOWN_EXPLOITED (1)

→[Source]CISA KEV

Explore deeper with Ninja Signal's threat intelligence graph