CVE-2015-5477

Vendordebian, suse, fedoraproject, canonical, redhatProductdebian linux, linux enterprise desktop, linux enterprise server, linux enterprise software development kit, fedora, ubuntu linux, enterprise linux, junos, solaris, clustered data ontap, linux enterprise debuginfo, openvms, enterprise linux aus, opensuse, bind, hp-ux, vm server, evergreen, os x server, dns, vcxDiscoveredJul 29, 2015UpdatedNov 3, 2026

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

View graph Watch Export

CVSS v3.1

7.5 HIGH

EPSS

99.6%

probability of exploitation in 30 days

CISA KEV

Listed

confirmed active exploitation

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Oct 26, 2026

▲ 8.30pp

91.3% → 99.6% over 3 tracked changes

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityNONE

IntegrityNONE

AvailabilityHIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Timeline

disclosure → media coverage

Jul 29, 2015

Disclosure — published as a CVE record. · last revised by NVD Nov 3, 2026

Public PoC (7)

github.com/robertdavidgraham/cve-2015-5477 github.com/elceef/tkeypoc github.com/hmlio/vaas-cve-2015-5477 github.com/knqyf263/cve-2015-5477 github.com/ilanyu/cve-2015-5477 github.com/likekabin/ShareDoc_cve-2015-5477 github.com/xycloops123/TKEY-remote-DoS-vulnerability-exploit

Unverified third-party code — review before executing.