Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2015-5477 Details

Description

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: CISA-ADPCVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5477	CISA-ADP	US Government Resource
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718	CVE	MitigationThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html	CVE	Mailing ListThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html	CVE	Mailing ListThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html	CVE	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=144000632319155&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=144017354030745&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=144181171013996&w=2	CVE	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=144294073801304&w=2	CVE	Mailing ListThird Party Advisory
http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html	CVE	Third Party AdvisoryVDB Entry
http://rhn.redhat.com/errata/RHSA-2015-1513.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1514.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1515.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0078.html	CVE	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0079.html	CVE	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415	CVE	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480	CVE	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918	CVE	Third Party Advisory
https://kb.isc.org/article/AA-01272	CVE	Broken LinkPatchVendor Advisory
https://kb.isc.org/article/AA-01305	CVE	Broken Link
https://kb.isc.org/article/AA-01306	CVE	Broken Link
https://kb.isc.org/article/AA-01307	CVE	Broken Link
https://kb.isc.org/article/AA-01438	CVE	Broken Link
https://kb.juniper.net/JSA10783	CVE	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10126	CVE	Broken Link
https://security.gentoo.org/glsa/201510-01	CVE	Third Party Advisory
https://security.netapp.com/advisory/ntap-20160114-0001/	CVE	Third Party Advisory
https://support.apple.com/kb/HT205032	CVE	Third Party Advisory
https://www.exploit-db.com/exploits/37721/	CVE	ExploitThird Party AdvisoryVDB Entry
https://www.exploit-db.com/exploits/37723/	CVE	Third Party AdvisoryVDB Entry
http://www.debian.org/security/2015/dsa-3319	CVE	Mailing ListThird Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html	CVE	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	CVE	Third Party Advisory
http://www.securityfocus.com/bid/76092	CVE	Third Party Advisory
http://www.securitytracker.com/id/1033100	CVE	Broken Link
http://www.ubuntu.com/usn/USN-2693-1	CVE	Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718	[email protected]	MitigationThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html	[email protected]	Mailing ListThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html	[email protected]	Mailing ListThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html	[email protected]	Mailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=144000632319155&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=144017354030745&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=144181171013996&w=2	[email protected]	Mailing ListThird Party Advisory
http://marc.info/?l=bugtraq&m=144294073801304&w=2	[email protected]	Mailing ListThird Party Advisory
http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html	[email protected]	Third Party AdvisoryVDB Entry
http://rhn.redhat.com/errata/RHSA-2015-1513.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1514.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-1515.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0078.html	[email protected]	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0079.html	[email protected]	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415	[email protected]	Third Party Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480	[email protected]	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918	[email protected]	Third Party Advisory
https://kb.isc.org/article/AA-01272	[email protected]	Broken LinkPatchVendor Advisory
https://kb.isc.org/article/AA-01305	[email protected]	Broken Link
https://kb.isc.org/article/AA-01306	[email protected]	Broken Link
https://kb.isc.org/article/AA-01307	[email protected]	Broken Link
https://kb.isc.org/article/AA-01438	[email protected]	Broken Link
https://kb.juniper.net/JSA10783	[email protected]	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10126	[email protected]	Broken Link
https://security.gentoo.org/glsa/201510-01	[email protected]	Third Party Advisory
https://security.netapp.com/advisory/ntap-20160114-0001/	[email protected]	Third Party Advisory
https://support.apple.com/kb/HT205032	[email protected]	Third Party Advisory
https://www.exploit-db.com/exploits/37721/	[email protected]	ExploitThird Party AdvisoryVDB Entry
https://www.exploit-db.com/exploits/37723/	[email protected]	Third Party AdvisoryVDB Entry
http://www.debian.org/security/2015/dsa-3319	[email protected]	Mailing ListThird Party Advisory
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html	[email protected]	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	[email protected]	Third Party Advisory
http://www.securityfocus.com/bid/76092	[email protected]	Third Party Advisory
http://www.securitytracker.com/id/1033100	[email protected]	Broken Link
http://www.ubuntu.com/usn/USN-2693-1	[email protected]	Third Party Advisory

see all 85 references

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Vulnerability Name	Date Added	Due Date	Required Action
ISC BIND Data Processing Errors Vulnerability	Oct 8, 2026	Oct 11, 2026	Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-19	Data Processing Errors	[email protected]
CWE-617	Reachable Assertion	CISA-ADP

Affected Products

Product	Versions
juniper junos	< 12.1 >= 13.1, < 13.2 12.1 - 12.1 r11 12.1r
CPE cpe:2.3:o:juniper:junos:::::::: cpe:2.3:o:juniper:junos:12.1:-:::::: cpe:2.3:o:juniper:junos:12.1:r11:::::: cpe:2.3:o:juniper:junos:12.1r:::::::* cpe:2.3:o:juniper:junos:12.1x44:-:::::: cpe:2.3:o:juniper:junos:12.1x44:d10:::::: cpe:2.3:o:juniper:junos:12.1x44:d15:::::: cpe:2.3:o:juniper:junos:12.1x44:d20:::::: cpe:2.3:o:juniper:junos:12.1x44:d25:::::: cpe:2.3:o:juniper:junos:12.1x44:d30:::::: cpe:2.3:o:juniper:junos:12.1x44:d35:::::: cpe:2.3:o:juniper:junos:12.1x44:d40:::::: cpe:2.3:o:juniper:junos:12.1x44:d45:::::: cpe:2.3:o:juniper:junos:12.1x44:d50:::::: cpe:2.3:o:juniper:junos:12.1x45:::::::* cpe:2.3:o:juniper:junos:12.1x45:-:::::: cpe:2.3:o:juniper:junos:12.1x45:d10:::::: cpe:2.3:o:juniper:junos:12.1x45:d15:::::: cpe:2.3:o:juniper:junos:12.1x45:d20:::::: cpe:2.3:o:juniper:junos:12.1x45:d30:::::: cpe:2.3:o:juniper:junos:12.1x46:-:::::: cpe:2.3:o:juniper:junos:12.1x46:d10:::::: cpe:2.3:o:juniper:junos:12.1x46:d15:::::: cpe:2.3:o:juniper:junos:12.1x46:d20:::::: cpe:2.3:o:juniper:junos:12.1x46:d25:::::: cpe:2.3:o:juniper:junos:12.1x46:d30:::::: cpe:2.3:o:juniper:junos:12.1x46:d35:::::: cpe:2.3:o:juniper:junos:12.1x47:-:::::: cpe:2.3:o:juniper:junos:12.1x47:d10:::::: cpe:2.3:o:juniper:junos:12.1x47:d15:::::: cpe:2.3:o:juniper:junos:12.1x47:d20:::::: cpe:2.3:o:juniper:junos:12.1x47:d25:::::: cpe:2.3:o:juniper:junos:12.3:-:::::: cpe:2.3:o:juniper:junos:12.3:r1:::::: cpe:2.3:o:juniper:junos:12.3:r10:::::: cpe:2.3:o:juniper:junos:12.3:r10-s1:::::: cpe:2.3:o:juniper:junos:12.3:r10-s2:::::: cpe:2.3:o:juniper:junos:12.3x48:-:::::: cpe:2.3:o:juniper:junos:12.3x48:d10:::::: cpe:2.3:o:juniper:junos:12.3x48:d15:::::: cpe:2.3:o:juniper:junos:12.3x50:-:::::: cpe:2.3:o:juniper:junos:12.3x50:d20:::::: cpe:2.3:o:juniper:junos:12.3x50:d30:::::: cpe:2.3:o:juniper:junos:12.3x50:d35:::::: cpe:2.3:o:juniper:junos:12.3x50:d40:::::: cpe:2.3:o:juniper:junos:12.3x50:d45:::::: cpe:2.3:o:juniper:junos:13.2:-:::::: cpe:2.3:o:juniper:junos:13.2:r1:::::: cpe:2.3:o:juniper:junos:13.2:r2:::::: cpe:2.3:o:juniper:junos:13.2:r3:::::: cpe:2.3:o:juniper:junos:13.2:r4:::::: cpe:2.3:o:juniper:junos:13.2:r5:::::: cpe:2.3:o:juniper:junos:13.2:r6:::::: cpe:2.3:o:juniper:junos:13.2:r7:::::: cpe:2.3:o:juniper:junos:13.2:r7-s1:::::: cpe:2.3:o:juniper:junos:13.2:r7-s2:::::: cpe:2.3:o:juniper:junos:13.2:r8:::::: cpe:2.3:o:juniper:junos:13.2x51:-:::::: cpe:2.3:o:juniper:junos:13.2x51:d15:::::: cpe:2.3:o:juniper:junos:13.2x51:d20:::::: cpe:2.3:o:juniper:junos:13.2x51:d20.2:::::: cpe:2.3:o:juniper:junos:13.2x51:d21:::::: cpe:2.3:o:juniper:junos:13.2x51:d25:::::: cpe:2.3:o:juniper:junos:13.2x51:d26:::::: cpe:2.3:o:juniper:junos:13.2x51:d30:::::: cpe:2.3:o:juniper:junos:13.2x51:d35:::::: cpe:2.3:o:juniper:junos:14.1:-:::::: cpe:2.3:o:juniper:junos:14.1:r1:::::: cpe:2.3:o:juniper:junos:14.1:r2:::::: cpe:2.3:o:juniper:junos:14.1:r3:::::: cpe:2.3:o:juniper:junos:14.1:r4:::::: cpe:2.3:o:juniper:junos:14.1:r5:::::: cpe:2.3:o:juniper:junos:14.1x50:::::::* cpe:2.3:o:juniper:junos:14.1x50:d60:::::: cpe:2.3:o:juniper:junos:14.1x51:-:::::: cpe:2.3:o:juniper:junos:14.1x51:d60:::::: cpe:2.3:o:juniper:junos:14.1x53:-:::::: cpe:2.3:o:juniper:junos:14.1x53:d10:::::: cpe:2.3:o:juniper:junos:14.1x53:d15:::::: cpe:2.3:o:juniper:junos:14.1x53:d16:::::: cpe:2.3:o:juniper:junos:14.1x53:d20:::::: cpe:2.3:o:juniper:junos:14.1x53:d25:::::: cpe:2.3:o:juniper:junos:14.1x53:d26:::::: cpe:2.3:o:juniper:junos:14.1x53:d27:::::: cpe:2.3:o:juniper:junos:14.1x53:r1:::::: cpe:2.3:o:juniper:junos:14.2:-:::::: cpe:2.3:o:juniper:junos:14.2:r:::::: cpe:2.3:o:juniper:junos:14.2:r1:::::: cpe:2.3:o:juniper:junos:14.2:r2:::::: cpe:2.3:o:juniper:junos:14.2:r3:::::: cpe:2.3:o:juniper:junos:14.2:r4:::::: cpe:2.3:o:juniper:junos:15.1:-:::::: cpe:2.3:o:juniper:junos:15.1:a1:::::: cpe:2.3:o:juniper:junos:15.1:f:::::: cpe:2.3:o:juniper:junos:15.1:f1:::::: cpe:2.3:o:juniper:junos:15.1:f2:::::: cpe:2.3:o:juniper:junos:15.1:f2-s1:::::: cpe:2.3:o:juniper:junos:15.1:f2-s2:::::: cpe:2.3:o:juniper:junos:15.1:f2-s3:::::: cpe:2.3:o:juniper:junos:15.1:f2-s4:::::: cpe:2.3:o:juniper:junos:15.1:r:::::: cpe:2.3:o:juniper:junos:15.1:r1:::::: cpe:2.3:o:juniper:junos:15.1x49:-:::::: cpe:2.3:o:juniper:junos:15.1x49:d10:::::: cpe:2.3:o:juniper:junos:15.1x49:d15:::::: cpe:2.3:o:juniper:junos:15.1x49:d20:::::: cpe:2.3:o:juniper:junos:15.1x49:d25:::::: cpe:2.3:o:juniper:junos:15.1x53:-:::::: cpe:2.3:o:juniper:junos:15.1x53:d10:::::: Remediation No remediation found in references.
juniper j2300	All versions
CPE cpe:2.3:h:juniper:j2300:-:::::::* Remediation No remediation found in references.
juniper j2320	All versions
CPE cpe:2.3:h:juniper:j2320:-:::::::* Remediation No remediation found in references.
juniper j2350	All versions
CPE cpe:2.3:h:juniper:j2350:-:::::::* Remediation No remediation found in references.
juniper j4300	All versions
CPE cpe:2.3:h:juniper:j4300:-:::::::* Remediation No remediation found in references.
juniper j4350	All versions
CPE cpe:2.3:h:juniper:j4350:-:::::::* Remediation No remediation found in references.
juniper j4350 nebs	All versions
CPE cpe:2.3:h:juniper:j4350_nebs:-:::::::* Remediation No remediation found in references.
juniper j6300	All versions
CPE cpe:2.3:h:juniper:j6300:-:::::::* Remediation No remediation found in references.
juniper j635 nebs	All versions
CPE cpe:2.3:h:juniper:j635_nebs:-:::::::* Remediation No remediation found in references.
juniper j6350	All versions
CPE cpe:2.3:h:juniper:j6350:-:::::::* Remediation No remediation found in references.
juniper jx-4bri	All versions
CPE cpe:2.3:h:juniper:jx-4bri:-:::::::* Remediation No remediation found in references.
juniper jx-4ct1e1	All versions
CPE cpe:2.3:h:juniper:jx-4ct1e1:-:::::::* Remediation No remediation found in references.
juniper srx100	All versions
CPE cpe:2.3:h:juniper:srx100:-:::::::* Remediation No remediation found in references.
juniper srx1400	All versions
CPE cpe:2.3:h:juniper:srx1400:-:::::::* Remediation No remediation found in references.
juniper srx1500	All versions
CPE cpe:2.3:h:juniper:srx1500:-:::::::* Remediation No remediation found in references.
juniper srx1600	All versions
CPE cpe:2.3:h:juniper:srx1600:-:::::::* Remediation No remediation found in references.
juniper srx2300	All versions
CPE cpe:2.3:h:juniper:srx2300:-:::::::* Remediation No remediation found in references.
juniper srx300	All versions
CPE cpe:2.3:h:juniper:srx300:-:::::::* Remediation No remediation found in references.
juniper srx320	All versions
CPE cpe:2.3:h:juniper:srx320:-:::::::* Remediation No remediation found in references.
juniper srx340	All versions
CPE cpe:2.3:h:juniper:srx340:-:::::::* Remediation No remediation found in references.
juniper srx3400	All versions
CPE cpe:2.3:h:juniper:srx3400:-:::::::* Remediation No remediation found in references.
juniper srx345	All versions
CPE cpe:2.3:h:juniper:srx345:-:::::::* Remediation No remediation found in references.
juniper srx3600	All versions
CPE cpe:2.3:h:juniper:srx3600:-:::::::* Remediation No remediation found in references.
juniper srx380	All versions
CPE cpe:2.3:h:juniper:srx380:-:::::::* Remediation No remediation found in references.
juniper srx400	All versions
CPE cpe:2.3:h:juniper:srx400:-:::::::* Remediation No remediation found in references.
juniper srx4100	All versions
CPE cpe:2.3:h:juniper:srx4100:-:::::::* Remediation No remediation found in references.
juniper srx4120	All versions
CPE cpe:2.3:h:juniper:srx4120:-:::::::* Remediation No remediation found in references.
juniper srx4200	All versions
CPE cpe:2.3:h:juniper:srx4200:-:::::::* Remediation No remediation found in references.
juniper srx4300	All versions
CPE cpe:2.3:h:juniper:srx4300:-:::::::* Remediation No remediation found in references.
juniper srx440	All versions
CPE cpe:2.3:h:juniper:srx440:-:::::::* Remediation No remediation found in references.
juniper srx4600	All versions
CPE cpe:2.3:h:juniper:srx4600:-:::::::* Remediation No remediation found in references.
juniper srx4700	All versions
CPE cpe:2.3:h:juniper:srx4700:-:::::::* Remediation No remediation found in references.
juniper srx5400	All versions
CPE cpe:2.3:h:juniper:srx5400:-:::::::* Remediation No remediation found in references.
juniper srx550 hm	All versions
CPE cpe:2.3:h:juniper:srx550_hm:-:::::::* Remediation No remediation found in references.
juniper srx5600	All versions
CPE cpe:2.3:h:juniper:srx5600:-:::::::* Remediation No remediation found in references.
juniper srx5800	All versions
CPE cpe:2.3:h:juniper:srx5800:-:::::::* Remediation No remediation found in references.
juniper srx650	All versions
CPE cpe:2.3:h:juniper:srx650:-:::::::* Remediation No remediation found in references.
fedoraproject fedora	21 22
CPE cpe:2.3:o:fedoraproject:fedora:21:::::::* cpe:2.3:o:fedoraproject:fedora:22:::::::* Remediation No remediation found in references.
redhat enterprise linux	5.0 6.0 7.0
CPE cpe:2.3:o:redhat:enterprise_linux:5.0:::::::* cpe:2.3:o:redhat:enterprise_linux:6.0:::::::* cpe:2.3:o:redhat:enterprise_linux:7.0:::::::* Remediation No remediation found in references.
redhat enterprise linux aus	6.4 6.5 6.6
CPE cpe:2.3:o:redhat:enterprise_linux_aus:6.4:::::::* cpe:2.3:o:redhat:enterprise_linux_aus:6.5:::::::* cpe:2.3:o:redhat:enterprise_linux_aus:6.6:::::::* Remediation No remediation found in references.
debian debian linux	7.0 8.0
CPE cpe:2.3:o:debian:debian_linux:7.0:::::::* cpe:2.3:o:debian:debian_linux:8.0:::::::* Remediation No remediation found in references.
oracle vm server	3.2
CPE cpe:2.3:a:oracle:vm_server:3.2::::::x86: Remediation No remediation found in references.
oracle solaris	10 11.2
CPE cpe:2.3:o:oracle:solaris:10:::::::* cpe:2.3:o:oracle:solaris:11.2:::::::* Remediation No remediation found in references.
hp hp-ux	11.11 11.23 11.31
CPE cpe:2.3:o:hp:hp-ux:11.11:::::::* cpe:2.3:o:hp:hp-ux:11.23:::::::* cpe:2.3:o:hp:hp-ux:11.31:::::::* Remediation No remediation found in references.
canonical ubuntu linux	12.04
CPE cpe:2.3:o:canonical:ubuntu_linux:12.04::::lts::: Remediation No remediation found in references.
netapp clustered data ontap	All versions
CPE cpe:2.3:a:netapp:clustered_data_ontap:-:::::::* Remediation No remediation found in references.
apple os x server	4.1.5
CPE cpe:2.3:o:apple:os_x_server:4.1.5:::::::* Remediation No remediation found in references.
hpe dns	9.2.3 9.3
CPE cpe:2.3:a:hpe:dns:9.2.3::::non_secure::: cpe:2.3:a:hpe:dns:9.3::::secure::: Remediation No remediation found in references.
hp openvms	5.7
CPE cpe:2.3:o:hp:openvms:5.7:::::::* Remediation No remediation found in references.
hpe vcx	< 9.8.18
CPE cpe:2.3:a:hpe:vcx:::::::: Remediation No remediation found in references.
hpe j9668a	All versions
CPE cpe:2.3:h:hpe:j9668a:-:::::::* Remediation No remediation found in references.
hpe j9669a	All versions
CPE cpe:2.3:h:hpe:j9669a:-:::::::* Remediation No remediation found in references.
hpe j9672a	All versions
CPE cpe:2.3:h:hpe:j9672a:-:::::::* Remediation No remediation found in references.
hpe jc516a	All versions
CPE cpe:2.3:h:hpe:jc516a:-:::::::* Remediation No remediation found in references.
hpe jc517a	All versions
CPE cpe:2.3:h:hpe:jc517a:-:::::::* Remediation No remediation found in references.
hpe jc518a	All versions
CPE cpe:2.3:h:hpe:jc518a:-:::::::* Remediation No remediation found in references.
hpe jd023a	All versions
CPE cpe:2.3:h:hpe:jd023a:-:::::::* Remediation No remediation found in references.
hpe jd024a	All versions
CPE cpe:2.3:h:hpe:jd024a:-:::::::* Remediation No remediation found in references.
hpe jd025a	All versions
CPE cpe:2.3:h:hpe:jd025a:-:::::::* Remediation No remediation found in references.
hpe jd026a	All versions
CPE cpe:2.3:h:hpe:jd026a:-:::::::* Remediation No remediation found in references.
hpe jd027a	All versions
CPE cpe:2.3:h:hpe:jd027a:-:::::::* Remediation No remediation found in references.
hpe jd028a	All versions
CPE cpe:2.3:h:hpe:jd028a:-:::::::* Remediation No remediation found in references.
hpe jd029a	All versions
CPE cpe:2.3:h:hpe:jd029a:-:::::::* Remediation No remediation found in references.
hpe je252a	All versions
CPE cpe:2.3:h:hpe:je252a:-:::::::* Remediation No remediation found in references.
hpe je253a	All versions
CPE cpe:2.3:h:hpe:je253a:-:::::::* Remediation No remediation found in references.
hpe je254a	All versions
CPE cpe:2.3:h:hpe:je254a:-:::::::* Remediation No remediation found in references.
hpe je340a	All versions
CPE cpe:2.3:h:hpe:je340a:-:::::::* Remediation No remediation found in references.
hpe je341a	All versions
CPE cpe:2.3:h:hpe:je341a:-:::::::* Remediation No remediation found in references.
hpe je342a	All versions
CPE cpe:2.3:h:hpe:je342a:-:::::::* Remediation No remediation found in references.
hpe je355a	All versions
CPE cpe:2.3:h:hpe:je355a:-:::::::* Remediation No remediation found in references.
suse linux enterprise debuginfo	11 sp3 11 sp4
CPE cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:::::: cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:::::: Remediation No remediation found in references.
opensuse evergreen	11.4
CPE cpe:2.3:o:opensuse:evergreen:11.4:::::::* Remediation No remediation found in references.
opensuse opensuse	13.1 13.2
CPE cpe:2.3:o:opensuse:opensuse:13.1:::::::* cpe:2.3:o:opensuse:opensuse:13.2:::::::* Remediation No remediation found in references.
suse linux enterprise desktop	11 sp3 11 sp4 12 -
CPE cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:::::: cpe:2.3:o:suse:linux_enterprise_desktop:11:sp4:::::: cpe:2.3:o:suse:linux_enterprise_desktop:12:-:::::: Remediation No remediation found in references.
suse linux enterprise server	10 sp4 11 sp1 11 sp2 11 sp3 11 sp4
CPE cpe:2.3:o:suse:linux_enterprise_server:10:sp4:::ltss:::* cpe:2.3:o:suse:linux_enterprise_server:11:sp1:::ltss:-:: cpe:2.3:o:suse:linux_enterprise_server:11:sp2:::ltss:::* cpe:2.3:o:suse:linux_enterprise_server:11:sp3::::-::* cpe:2.3:o:suse:linux_enterprise_server:11:sp3::::vmware::* cpe:2.3:o:suse:linux_enterprise_server:11:sp4:::::: cpe:2.3:o:suse:linux_enterprise_server:12:-:::::: Remediation No remediation found in references.
suse linux enterprise software development kit	11 sp3 11 sp4 12 -
CPE cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3:::::: cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp4:::::: cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:::::: Remediation No remediation found in references.
isc bind	>= 9.1.0, < 9.9.7 >= 9.10.0, < 9.10.2 9.10.2 p1
CPE cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:9.10.2:p1:::-:::* Remediation No remediation found in references.

Change History

30 change records found show changes

Date	Action	Recorded By
Nov 3, 2026	CVE Modified	CISA-ADP
Oct 9, 2026	Modified Analysis	[email protected]
Oct 9, 2026	CVE Modified	CISA-ADP
Oct 8, 2026	CVE CISA KEV Update	Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government
Oct 8, 2026	CVE Modified	CISA-ADP
Oct 8, 2026	CVE Modified	[email protected]
Oct 8, 2026	CVE Modified	CVE
Jun 17, 2026	CVE Modified	[email protected]
May 6, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Nov 10, 2017	CVE Modified	[email protected]
Sep 17, 2017	CVE Modified	[email protected]
May 24, 2017	CVE Modified	[email protected]
Dec 31, 2016	CVE Modified	[email protected]
Dec 24, 2016	CVE Modified	[email protected]
Dec 22, 2016	CVE Modified	[email protected]
Dec 8, 2016	CVE Modified	[email protected]
Dec 7, 2016	CVE Modified	[email protected]
Dec 6, 2016	CVE Modified	[email protected]
Nov 28, 2016	CVE Modified	[email protected]
Oct 18, 2016	CVE Modified	[email protected]
Sep 9, 2016	CVE Modified	[email protected]
Aug 23, 2016	CVE Modified	[email protected]
Aug 20, 2016	CVE Modified	[email protected]
Jun 15, 2016	CVE Modified	[email protected]
Aug 26, 2015	CVE Modified	[email protected]
Aug 18, 2015	CVE Modified	[email protected]
Jul 29, 2015	Modified Analysis	[email protected]
Jul 29, 2015	Initial Analysis	[email protected]

CVE-2015-5477 Details

Description

Metrics

References to Advisories, Solutions, and Tools

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE