Skip to content
OpenAdvisories
High 1 exploited CVE USN-2693-1 2 CVEs

bind9 vulnerabilities

Published Jul 28, 2015 · Updated Oct 12, 2026

Ecosystem: Ubuntu

Summary

Jonathan Foote discovered that Bind incorrectly handled certain TKEY
queries. A remote attacker could use this issue with a specially crafted
packet to cause Bind to crash, resulting in a denial of service.
(CVE-2015-5477)

Pories Ediansyah discovered that Bind incorrectly handled certain
configurations involving DNS64. A remote attacker could use this issue with
a specially crafted query to cause Bind to crash, resulting in a denial of
service. This issue only affected Ubuntu 12.04 LTS. (CVE-2012-5689)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS bind9 1:9.9.5.dfsg-3ubuntu0.4

Vulnerabilities 2

  • High 7.5
    CVE-2015-5477 Exploited Public exploit EPSS 100%

    named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service …

    bind9 bind9 Debian Ubuntu
    KEV Oct 8, 2026
  • Unscored —
    CVE-2012-5689 EPSS 12%

    ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response P…

    bind9 Debian

References

  • report
    https://ubuntu.com/security/CVE-2012-5689
  • report
    https://ubuntu.com/security/CVE-2015-5477