Actively exploited in the wild
ISC BIND Data Processing Errors Vulnerability
ISC - BIND · Listed in the CISA KEV since 2026-10-08. This indicates confirmed attacks in production environments.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
CVE-2015-5477
HighCVSS 7.5KEVExploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
A vulnerability in ISC BIND 9.x before version 9.9.7-P2 and 9.10.x before version 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
Risk Assessment
Attackers can exploit this vulnerability to disrupt the operation of the DNS server, potentially leading to service outages.
Recommendation
It is recommended to upgrade to the latest version of ISC BIND to eliminate this vulnerability and secure the server against potential attacks.
Other vulnerabilities in ISC BIND
See all- CVE-2016-9444High
In ISC BIND 9.x before version 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2, a vulnerability allows remote attackers to cause a denial of service via a crafted DS resource record in an answer.
- CVE-2016-9147High
ISC BIND versions 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 contain a vulnerability that allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a response containing an inconsistency among DNSSEC-related RRsets.
- CVE-2016-9131High
ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 has a vulnerability that allows remote attackers to cause a denial of service via a malformed response to an RTYPE ANY query.
- CVE-2016-8864High
A vulnerability in ISC BIND 9.x before version 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service via a DNAME record in the answer section of a response to a recursive query.
- CVE-2016-2848High
ISC BIND versions 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allow remote attackers to cause a denial of service (assertion failure and daemon exit) via malformed options data in an OPT resource record.
- CVE-2016-2776High
In buffer.c in ISC BIND 9 before version 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3, responses are not properly constructed, allowing remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
- CVE-2016-1286High
A vulnerability in ISC BIND 9.x before version 9.9.8-P4 and 9.10.x before version 9.10.3-P4 allows remote attackers to cause a denial of service via a crafted signature record for a DNAME record.
- CVE-2015-8705High
In buffer.c in ISC BIND 9.10.x before version 9.10.3-P3, when debug logging is enabled, remote attackers can cause a denial of service (REQUIRE assertion failure and daemon exit, or daemon crash) or possibly have unspecified other impact via OPT data or an ECS option.
- CVE-2015-8461High
A race condition in resolver.c in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of service (INSIST assertion failure and daemon exit) via unspecified vectors.
- CVE-2015-5986High
In ISC BIND versions 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4, a vulnerability allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a crafted DNS response.
Original NVD description (English source)
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS