Description
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | bind9 | 1:9.9.5.dfsg-11 | — |
| Debian 13 | bind9 | 1:9.9.5.dfsg-11 | — |
| Debian 12 | bind9 | 1:9.9.5.dfsg-11 | — |
| Debian 8 | bind9 | 1:9.9.5.dfsg-9+deb8u2 | DSA-3319-1 |
| Debian 7 | bind9 | 1:9.8.4.dfsg.P1-6+nmu2+deb7u6 | DSA-3319-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 6.0 | bind9 | 1:9.7.3.dfsg-1~squeeze16 | DLA-285-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | bind9 | 1:9.9.5.dfsg-3ubuntu0.4 | USN-2693-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | bind +9 | 32:9.9.4-18.ael7b_1.3 | RHSA-2015:1513 |
| RHEL 6 | bind +5 | 32:9.8.2-0.37.rc1.el6_7.2 | RHSA-2015:1513 |
| RHEL 5 | bind +7 | 30:9.3.6-25.P1.el5_11.3 | RHSA-2015:1514 |
| RHEL 5 | bind97 +4 | 32:9.7.0-21.P2.el5_11.2 | RHSA-2015:1515 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6.6 EUS | bind +5 | 32:9.8.2-0.30.rc1.el6_6.4 | RHSA-2016:0079 |
| RHEL 6.5 AUS | bind +5 | 32:9.8.2-0.23.rc1.el6_5.2 | RHSA-2016:0078 |
| RHEL 6.4 AUS | bind +5 | 32:9.8.2-0.17.rc1.el6_4.7 | RHSA-2016:0078 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 | bind | 9.9.6P1-23.1 | SUSE-SU-2015:1305-1 |
| SLES 11 SP4 | bind | 9.9.6P1-0.12.1 | SUSE-SU-2015:1304-1 |
| SLES 11 SP3 | bind | 9.9.6P1-0.12.1 | SUSE-SU-2015:1304-1 |
| SLES 11 SP2 | bind | 9.9.6P1-0.12.1 | SUSE-SU-2015:1304-1 |
| SLES 11 SP1 | bind | 9.6ESVR11W1-0.6.1 | SUSE-SU-2015:1316-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 | bind | 9.9.6P1-23.1 | SUSE-SU-2015:1305-1 |
| SLES for SAP 11 SP4 | bind | 9.9.6P1-0.12.1 | SUSE-SU-2015:1304-1 |
| SLES for SAP 11 SP3 | bind | 9.9.6P1-0.12.1 | SUSE-SU-2015:1304-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | bind | 9.10.3P4-21.1 | openSUSE-SU-2024:10467-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | bind +9 | 32:9.9.4-18.el7_1.3 | ELSA-2015-1513 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
BIND TKEY Query Denial of Service
auxiliary/dos/dns/bind_tkey
Exploit-DB 2
- ISC BIND 9 - TKEY Remote Denial of Service (PoC) EDB-37723 · dos · Aug 5, 2015
- ISC BIND 9 - TKEY (PoC) EDB-37721 · dos · Aug 1, 2015 · verified
GitHub 7 repositories
-
robertdavidgraham/cve-2015-5477 ★ 64 · Jul 31, 2015
PoC exploit for CVE-2015-5477 BIND9 TKEY assertion failure
-
elceef/tkeypoc ★ 14 · Aug 1, 2015
PoC exploit code for CVE-2015-5477 BIND9 TKEY remote DoS vulnerability
-
ilanyu/cve-2015-5477 ★ 1 · Aug 19, 2015
PoC exploit for CVE-2015-5477 in php
-
knqyf263/cve-2015-5477 ★ 1 · Aug 9, 2015
PoC for BIND9 TKEY assert DoS (CVE-2015-5477)
-
hmlio/vaas-cve-2015-5477 ★ 1 · Aug 4, 2015
Vulnerability as a service: showcasing CVS-2015-5447, a DDoS condition in the bind9 software
-
xycloops123/TKEY-remote-DoS-vulnerability-exploit ★ 0 · May 11, 2020
Exploit code for CVE-2015-5477 POC
-
likekabin/ShareDoc_cve-2015-5477 ★ 0 · Jul 17, 2018
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 14
- USN-2693-1 bind9 vulnerabilities Ubuntu Security Notices (USN) · Oct 12, 2026
- RHSA-2016:0078 Red Hat Security Advisory: bind security update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- RHSA-2015:1514 Red Hat Security Advisory: bind security update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- RHSA-2015:1513 Red Hat Security Advisory: bind security update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- RHSA-2016:0079 Red Hat Security Advisory: bind security update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- RHSA-2015:1515 Red Hat Security Advisory: bind97 security update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- DLA-285-1 bind9 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3319-1 bind9 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10467-1 bind-9.10.3P4-21.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:1305-1 Security update for bind SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2025-1181 Internet Systems Consortium BIND: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · May 29, 2025
- SUSE-SU-2015:1304-1 Security update for bind SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-SU-2015:1316-1 Security update for bind SUSE / openSUSE Security Updates · May 2, 2025
- ELSA-2015-1513 Important: bind security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jul 29, 2015
References
- http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- openSUSE-SU-2015:1326 vendor-advisory
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415
- https://kb.juniper.net/JSA10783
- RHSA-2015:1513 vendor-advisory
- SUSE-SU-2015:1305 vendor-advisory
- https://security.netapp.com/advisory/ntap-20160114-0001/
- https://kb.isc.org/article/AA-01438
- FEDORA-2015-12316 vendor-advisory
- HPSBUX03410 vendor-advisory
- SSRT102248 vendor-advisory
- RHSA-2016:0079 vendor-advisory
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918
- http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718
- RHSA-2015:1514 vendor-advisory
- USN-2693-1 vendor-advisory
- https://support.apple.com/kb/HT205032
- 1033100 vdb-entry
- https://kb.isc.org/article/AA-01307
- 76092 vdb-entry
- SUSE-SU-2015:1316 vendor-advisory
- openSUSE-SU-2015:1335 vendor-advisory
- 37721 exploit
- RHSA-2015:1515 vendor-advisory
- SUSE-SU-2015:1322 vendor-advisory
- GLSA-201510-01 vendor-advisory
- SUSE-SU-2015:1304 vendor-advisory
- HPSBOV03506 vendor-advisory
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480
- DSA-3319 vendor-advisory
- FEDORA-2015-12357 vendor-advisory
- HPSBUX03400 vendor-advisory
- FEDORA-2015-12335 vendor-advisory
- 37723 exploit
- https://kb.isc.org/article/AA-01305
- RHSA-2016:0078 vendor-advisory
- SUSE-SU-2016:0227 vendor-advisory
- https://kb.isc.org/article/AA-01306
- https://kc.mcafee.com/corporate/index?page=content&id=SB10126
- https://kb.isc.org/article/AA-01272