Description
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
References
- www.cve.org/CVERecord ↗
- nvd.nist.gov/vuln/detail/CVE-2015-5477 ↗
- kb.juniper.net/InfoCenter/index ↗
- lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html ↗
- lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html ↗
- lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html ↗
- lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html ↗
- lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html ↗
- lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html ↗
- lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html ↗
- lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html ↗
- lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html ↗
- lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html ↗
- marc.info/ ↗
- marc.info/ ↗
- marc.info/ ↗
- marc.info/ ↗
- packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html ↗
- rhn.redhat.com/errata/RHSA-2015-1513.html ↗
- rhn.redhat.com/errata/RHSA-2015-1514.html ↗
- rhn.redhat.com/errata/RHSA-2015-1515.html ↗
- rhn.redhat.com/errata/RHSA-2016-0078.html ↗
- rhn.redhat.com/errata/RHSA-2016-0079.html ↗
- www.debian.org/security/2015/dsa-3319 ↗
- www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html ↗
- www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html ↗
- www.securityfocus.com/bid/76092 ↗
- www.securitytracker.com/id/1033100 ↗
- www.ubuntu.com/usn/USN-2693-1 ↗
- h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay ↗
- h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay ↗
- h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay ↗
Related CVEs
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.