CVE-2015-5477

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

CVSS v2.0

7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS

91.28% chance of exploitation in the next 30 days, 100th percentile

Published

2015-07-29

Updated

2024-08-06

Proof-of-concept exploits (9)

• elceef/tkeypoc14★ · 2015-08-01
• hmlio/vaas-cve-2015-54771★ · 2015-08-04
• ilanyu/cve-2015-54771★ · 2015-08-19
• knqyf263/cve-2015-54771★ · 2015-08-17
• likekabin/ShareDoc_cve-2015-54770★ · 2018-07-17
• likescam/ShareDoc_cve-2015-54770★ · 2018-07-17
• robertdavidgraham/cve-2015-547764★ · 2015-08-01
• thenothing0/tkeypoc0★ · 2025-06-18
• xycloops123/TKEY-remote-DoS-vulnerability-exploit0★ · 2020-05-11

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/dns/bind_tkey.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/37721
• https://www.exploit-db.com/exploits/37723

References

• CVE Record
• NVD entry

Related

• CVE-2014-0160
• CVE-2014-6271
• CVE-2018-1111
• CVE-2018-11235
• CVE-2018-11776
• CVE-2018-1273