ID CVE-2015-5477
Summary named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
References
Vulnerable Configurations
  • ISC BIND 9.9.7 Patch 1
    cpe:2.3:a:isc:bind:9.9.7:p1
  • ISC BIND 9.10.2 Patch 2
    cpe:2.3:a:isc:bind:9.10.2:p2
CVSS
Base: 7.8 (as of 20-10-2016 - 10:18)
Impact:
Exploitability:
CWE CWE-19
CAPEC
  • Overflow Buffers
    Buffer Overflow attacks target improper or missing bounds checking on buffer operations, typically triggered by input injected by an attacker. As a consequence, an attacker is able to write past the boundaries of allocated buffer regions in memory, causing a program crash or potentially redirection of execution as per the attackers' choice.
  • XML Nested Payloads
    Applications often need to transform data in and out of the XML format by using an XML parser. It may be possible for an attacker to inject data that may have an adverse effect on the XML parser when it is being processed. By nesting XML data and causing this data to be continuously self-referential, an attacker can cause the XML parser to consume more resources while processing, causing excessive memory consumption and CPU utilization. An attacker's goal is to leverage parser failure to his or her advantage. In most cases this type of an attack will result in a denial of service due to an application becoming unstable, freezing, or crash. However it may be possible to cause a crash resulting in arbitrary code execution, leading to a jump from the data plane to the control plane [R.230.1].
  • XML Oversized Payloads
    Applications often need to transform data in and out of the XML format by using an XML parser. It may be possible for an attacker to inject data that may have an adverse effect on the XML parser when it is being processed. By supplying oversized payloads in input vectors that will be processed by the XML parser, an attacker can cause the XML parser to consume more resources while processing, causing excessive memory consumption and CPU utilization, and potentially cause execution of arbitrary code. An attacker's goal is to leverage parser failure to his or her advantage. In many cases this type of an attack will result in a denial of service due to an application becoming unstable, freezing, or crash. However it is possible to cause a crash resulting in arbitrary code execution, leading to a jump from the data plane to the control plane [R.231.1].
  • XML Client-Side Attack
    Client applications such as web browsers that process HTML data often need to transform data in and out of the XML format by using an XML parser. It may be possible for an attacker to inject data that may have an adverse effect on the XML parser when it is being processed. These adverse effects may include the parser crashing, consuming too much of a resource, executing too slowly, executing code supplied by an attacker, allowing usage of unintended system functionality, etc. An attacker's goal is to leverage parser failure to his or her advantage. In some cases it may be possible to jump from the data plane to the control plane via bad data being passed to an XML parser. [R.484.1]
  • XML Parser Attack
    Applications often need to transform data in and out of the XML format by using an XML parser. It may be possible for an attacker to inject data that may have an adverse effect on the XML parser when it is being processed. These adverse effects may include the parser crashing, consuming too much of a resource, executing too slowly, executing code supplied by an attacker, allowing usage of unintended system functionality, etc. An attacker's goal is to leverage parser failure to his or her advantage. In some cases it may be possible to jump from the data plane to the control plane via bad data being passed to an XML parser. [R.99.1]
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
exploit-db via4
  • description BIND9 - TKEY PoC. CVE-2015-5477. Dos exploits for multiple platform
    file exploits/multiple/dos/37721.c
    id EDB-ID:37721
    last seen 2016-02-04
    modified 2015-08-01
    platform multiple
    port
    published 2015-08-01
    reporter Errata Security
    source https://www.exploit-db.com/download/37721/
    title BIND9 - TKEY PoC
    type dos
  • description ISC BIND9 TKEY Remote DoS PoC. CVE-2015-5477. Dos exploits for multiple platform
    file exploits/multiple/dos/37723.py
    id EDB-ID:37723
    last seen 2016-02-04
    modified 2015-08-05
    platform multiple
    port
    published 2015-08-05
    reporter elceef
    source https://www.exploit-db.com/download/37723/
    title ISC BIND9 TKEY Remote DoS PoC
    type dos
metasploit via4
description This module sends a malformed TKEY query, which exploits an error in handling TKEY queries on affected BIND9 'named' DNS servers. As a result, a vulnerable named server will exit with a REQUIRE assertion failure. This condition can be exploited in versions of BIND between BIND 9.1.0 through 9.8.x, 9.9.0 through 9.9.7-P1 and 9.10.0 through 9.10.2-P2.
id MSF:AUXILIARY/DOS/DNS/BIND_TKEY
last seen 2019-03-12
modified 2018-11-16
published 2015-07-31
reliability Normal
reporter Rapid7
source https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/dns/bind_tkey.rb
title BIND TKEY Query Denial of Service
nessus via4
  • NASL family OracleVM Local Security Checks
    NASL id ORACLEVM_OVMSA-2016-0055.NASL
    description The remote OracleVM system is missing necessary patches to address critical security updates : - Fix issue with patch for CVE-2016-1285 and CVE-2016-1286 found by test suite - Fix (CVE-2016-1285, CVE-2016-1286) - Fix (CVE-2015-8704) - Fix (CVE-2015-8000) - Fix (CVE-2015-5722) - Fix (CVE-2015-5477) - Remove files backup after patching (Related: #1171971) - Fix CVE-2014-8500 (#1171971) - fix race condition in socket module - fix (CVE-2012-5166) - bind-chroot-admin: set correct permissions on /etc/named.conf during update - fix (CVE-2012-4244) - fix (CVE-2012-3817) - fix (CVE-2012-1667) - fix (CVE-2012-1033)
    last seen 2019-02-21
    modified 2018-07-24
    plugin id 91739
    published 2016-06-22
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=91739
    title OracleVM 3.2 : bind (OVMSA-2016-0055)
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2016-0078.NASL
    description Updated bind packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6.4 and 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. A denial of service flaw was found in the way BIND followed DNS delegations. A remote attacker could use a specially crafted zone containing a large number of referrals which, when looked up and processed, would cause named to use excessive amounts of memory or crash. (CVE-2014-8500) A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named (functioning as an authoritative DNS server or a DNS resolver) exit unexpectedly with an assertion failure via a specially crafted DNS request packet. (CVE-2015-5477) A denial of service flaw was found in the way BIND parsed certain malformed DNSSEC keys. A remote attacker could use this flaw to send a specially crafted DNS query (for example, a query requiring a response from a zone containing a deliberately malformed key) that would cause named functioning as a validating resolver to crash. (CVE-2015-5722) A denial of service flaw was found in the way BIND processed certain records with malformed class attributes. A remote attacker could use this flaw to send a query to request a cached record with a malformed class attribute that would cause named functioning as an authoritative or recursive server to crash. (CVE-2015-8000) Note: This issue affects authoritative servers as well as recursive servers, however authoritative servers are at limited risk if they perform authentication when making recursive queries to resolve addresses for servers listed in NS RRSETs. Red Hat would like to thank ISC for reporting the CVE-2015-5477, CVE-2015-5722, and CVE-2015-8000 issues. Upstream acknowledges Jonathan Foote as the original reporter of CVE-2015-5477, and Hanno Bock as the original reporter of CVE-2015-5722. All bind users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the update, the BIND daemon (named) will be restarted automatically.
    last seen 2019-02-21
    modified 2018-12-20
    plugin id 88479
    published 2016-01-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=88479
    title RHEL 6 : bind (RHSA-2016:0078)
  • NASL family OracleVM Local Security Checks
    NASL id ORACLEVM_OVMSA-2017-0066.NASL
    description The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2017-3136 (ISC change 4575) - Fix CVE-2017-3137 (ISC change 4578) - Fix and test caching CNAME before DNAME (ISC change 4558) - Fix CVE-2016-9147 (ISC change 4510) - Fix regression introduced by CVE-2016-8864 (ISC change 4530) - Restore SELinux contexts before named restart - Use /lib or /lib64 only if directory in chroot already exists - Tighten NSS library pattern, escape chroot mount path - Fix (CVE-2016-8864) - Do not change lib permissions in chroot (#1321239) - Support WKS records in chroot (#1297562) - Do not include patch backup in docs (fixes #1325081 patch) - Backported relevant parts of [RT #39567] (#1259923) - Increase ISC_SOCKET_MAXEVENTS to 2048 (#1326283) - Fix multiple realms in nsupdate script like upstream (#1313286) - Fix multiple realm in nsupdate script (#1313286) - Use resolver-query-timeout high enough to recover all forwarders (#1325081) - Fix (CVE-2016-2848) - Fix infinite loop in start_lookup (#1306504) - Fix (CVE-2016-2776)
    last seen 2019-02-21
    modified 2018-07-24
    plugin id 99569
    published 2017-04-21
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=99569
    title OracleVM 3.3 / 3.4 : bind (OVMSA-2017-0066)
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2016-0079.NASL
    description Updated bind packages that fix three security issues are now available for Red Hat Enterprise Linux 6.6 Extended Update Support. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named (functioning as an authoritative DNS server or a DNS resolver) exit unexpectedly with an assertion failure via a specially crafted DNS request packet. (CVE-2015-5477) A denial of service flaw was found in the way BIND parsed certain malformed DNSSEC keys. A remote attacker could use this flaw to send a specially crafted DNS query (for example, a query requiring a response from a zone containing a deliberately malformed key) that would cause named functioning as a validating resolver to crash. (CVE-2015-5722) A denial of service flaw was found in the way BIND processed certain records with malformed class attributes. A remote attacker could use this flaw to send a query to request a cached record with a malformed class attribute that would cause named functioning as an authoritative or recursive server to crash. (CVE-2015-8000) Note: This issue affects authoritative servers as well as recursive servers, however authoritative servers are at limited risk if they perform authentication when making recursive queries to resolve addresses for servers listed in NS RRSETs. Red Hat would like to thank ISC for reporting the CVE-2015-5477, CVE-2015-5722, and CVE-2015-8000 issues. Upstream acknowledges Jonathan Foote as the original reporter of CVE-2015-5477, and Hanno Bock as the original reporter of CVE-2015-5722. All bind users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the update, the BIND daemon (named) will be restarted automatically.
    last seen 2019-02-21
    modified 2018-12-20
    plugin id 88480
    published 2016-01-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=88480
    title RHEL 6 : bind (RHSA-2016:0079)
  • NASL family SuSE Local Security Checks
    NASL id SUSE_SU-2016-0227-1.NASL
    description This update for bind fixes the following issues : CVE-2015-8000: Remote denial of service by mis-parsing incoming responses. (bsc#958861) CVE-2015-5722: DoS against servers performing validation on DNSSEC-signed records. (bsc#944066) CVE-2015-5477: DoS against authoritative and recursive servers. CVE-2015-8704: Specific APL data could trigger a crash. (bsc#962189) Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-11-29
    plugin id 88178
    published 2016-01-26
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=88178
    title SUSE SLES10 Security Update : bind (SUSE-SU-2016:0227-1)
  • NASL family Scientific Linux Local Security Checks
    NASL id SL_20150729_BIND_ON_SL5_X.NASL
    description A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named (functioning as an authoritative DNS server or a DNS resolver) exit unexpectedly with an assertion failure via a specially crafted DNS request packet. (CVE-2015-5477) After installing the update, the BIND daemon (named) will be restarted automatically.
    last seen 2019-02-21
    modified 2018-12-28
    plugin id 85120
    published 2015-07-30
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85120
    title Scientific Linux Security Update : bind on SL5.x i386/x86_64
  • NASL family AIX Local Security Checks
    NASL id AIX_IV75693.NASL
    description ISC BIND is vulnerable to a denial of service, caused by an error in the handling of TKEY queries. By sending specially-crafted packets, a remote attacker could exploit this vulnerability to cause a REQUIRE assertion failure.
    last seen 2019-02-21
    modified 2015-12-30
    plugin id 85416
    published 2015-08-17
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85416
    title AIX 7.1 TL 3 : bind9 (IV75693)
  • NASL family Slackware Local Security Checks
    NASL id SLACKWARE_SSA_2015-209-01.NASL
    description New bind packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue.
    last seen 2019-02-21
    modified 2015-09-13
    plugin id 85043
    published 2015-07-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85043
    title Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : bind (SSA:2015-209-01)
  • NASL family CentOS Local Security Checks
    NASL id CENTOS_RHSA-2015-1515.NASL
    description Updated bind97 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named (functioning as an authoritative DNS server or a DNS resolver) exit unexpectedly with an assertion failure via a specially crafted DNS request packet. (CVE-2015-5477) Red Hat would like to thank ISC for reporting this issue. Upstream acknowledges Jonathan Foote as the original reporter. All bind97 users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, the BIND daemon (named) will be restarted automatically.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 85049
    published 2015-07-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85049
    title CentOS 5 : bind97 (CESA-2015:1515)
  • NASL family AIX Local Security Checks
    NASL id AIX_IV75692.NASL
    description ISC BIND is vulnerable to a denial of service, caused by an error in the handling of TKEY queries. By sending specially-crafted packets, a remote attacker could exploit this vulnerability to cause a REQUIRE assertion failure.
    last seen 2019-02-21
    modified 2015-09-13
    plugin id 85415
    published 2015-08-17
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85415
    title AIX 6.1 TL 9 : bind9 (IV75692)
  • NASL family Scientific Linux Local Security Checks
    NASL id SL_20150729_BIND_ON_SL6_X.NASL
    description A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named (functioning as an authoritative DNS server or a DNS resolver) exit unexpectedly with an assertion failure via a specially crafted DNS request packet. (CVE-2015-5477) After installing the update, the BIND daemon (named) will be restarted automatically.
    last seen 2019-02-21
    modified 2018-12-28
    plugin id 85211
    published 2015-08-04
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85211
    title Scientific Linux Security Update : bind on SL6.x, SL7.x i386/x86_64
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2015-12357.NASL
    description Include fix for CVE-2015-5477 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2015-10-19
    plugin id 85171
    published 2015-08-03
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85171
    title Fedora 21 : bind-9.9.6-10.P1.fc21 (2015-12357)
  • NASL family CentOS Local Security Checks
    NASL id CENTOS_RHSA-2015-1513.NASL
    description Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named (functioning as an authoritative DNS server or a DNS resolver) exit unexpectedly with an assertion failure via a specially crafted DNS request packet. (CVE-2015-5477) Red Hat would like to thank ISC for reporting this issue. Upstream acknowledges Jonathan Foote as the original reporter. All bind users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, the BIND daemon (named) will be restarted automatically.
    last seen 2019-02-21
    modified 2018-09-17
    plugin id 85047
    published 2015-07-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85047
    title CentOS 6 / 7 : bind (CESA-2015:1513)
  • NASL family OracleVM Local Security Checks
    NASL id ORACLEVM_OVMSA-2015-0105.NASL
    description The remote OracleVM system is missing necessary patches to address critical security updates : - Fix (CVE-2015-5477) - Fix (CVE-2015-4620) - Resolves: 1215687 - DNS resolution failure in high load environment with SERVFAIL and 'out of memory/success' in the log - Fix (CVE-2015-1349) - Enable RPZ-NSIP and RPZ-NSDNAME during compilation (#1176476) - Fix race condition when using isc__begin_beginexclusive (#1175321) - Sanitize SDB API to better handle database errors (#1146893) - Fix CVE-2014-8500 (#1171974) - Fix RRL slip behavior when set to 1 (#1112356) - Fix issue causing bind to hang after reload if using DYNDB (#1142152)
    last seen 2019-02-21
    modified 2018-07-24
    plugin id 85146
    published 2015-07-31
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85146
    title OracleVM 3.3 : bind (OVMSA-2015-0105)
  • NASL family FreeBSD Local Security Checks
    NASL id FREEBSD_PKG_731CDEAA356411E5997014DAE9D210B8.NASL
    description ISC reports : An error in the handling of TKEY queries can be exploited by an attacker for use as a denial-of-service vector, as a constructed packet can use the defect to trigger a REQUIRE assertion failure, causing BIND to exit.
    last seen 2019-02-21
    modified 2018-12-19
    plugin id 85066
    published 2015-07-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85066
    title FreeBSD : bind -- denial of service vulnerability (731cdeaa-3564-11e5-9970-14dae9d210b8)
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2015-1513.NASL
    description Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named (functioning as an authoritative DNS server or a DNS resolver) exit unexpectedly with an assertion failure via a specially crafted DNS request packet. (CVE-2015-5477) Red Hat would like to thank ISC for reporting this issue. Upstream acknowledges Jonathan Foote as the original reporter. All bind users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, the BIND daemon (named) will be restarted automatically.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 85068
    published 2015-07-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85068
    title RHEL 6 / 7 : bind (RHSA-2015:1513)
  • NASL family Debian Local Security Checks
    NASL id DEBIAN_DLA-285.NASL
    description Jonathan Foote discovered that the BIND DNS server does not properly handle TKEY queries. A remote attacker can take advantage of this flaw to mount a denial of service via a specially crafted query triggering an assertion failure and causing BIND to exit. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-07-06
    plugin id 85052
    published 2015-07-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85052
    title Debian DLA-285-1 : bind9 security update
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2015-1515.NASL
    description Updated bind97 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named (functioning as an authoritative DNS server or a DNS resolver) exit unexpectedly with an assertion failure via a specially crafted DNS request packet. (CVE-2015-5477) Red Hat would like to thank ISC for reporting this issue. Upstream acknowledges Jonathan Foote as the original reporter. All bind97 users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, the BIND daemon (named) will be restarted automatically.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 85070
    published 2015-07-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85070
    title RHEL 5 : bind97 (RHSA-2015:1515)
  • NASL family AIX Local Security Checks
    NASL id AIX_IV75690.NASL
    description ISC BIND is vulnerable to a denial of service, caused by an error in the handling of TKEY queries. By sending specially-crafted packets, a remote attacker could exploit this vulnerability to cause a REQUIRE assertion failure.
    last seen 2019-02-21
    modified 2015-09-13
    plugin id 85414
    published 2015-08-17
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85414
    title AIX 7.1 TL 2 : bind9 (IV75690)
  • NASL family CentOS Local Security Checks
    NASL id CENTOS_RHSA-2015-1514.NASL
    description Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named (functioning as an authoritative DNS server or a DNS resolver) exit unexpectedly with an assertion failure via a specially crafted DNS request packet. (CVE-2015-5477) Red Hat would like to thank ISC for reporting this issue. Upstream acknowledges Jonathan Foote as the original reporter. All bind users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, the BIND daemon (named) will be restarted automatically.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 85048
    published 2015-07-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85048
    title CentOS 5 : bind (CESA-2015:1514)
  • NASL family Oracle Linux Local Security Checks
    NASL id ORACLELINUX_ELSA-2015-1513.NASL
    description From Red Hat Security Advisory 2015:1513 : Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named (functioning as an authoritative DNS server or a DNS resolver) exit unexpectedly with an assertion failure via a specially crafted DNS request packet. (CVE-2015-5477) Red Hat would like to thank ISC for reporting this issue. Upstream acknowledges Jonathan Foote as the original reporter. All bind users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, the BIND daemon (named) will be restarted automatically.
    last seen 2019-02-21
    modified 2018-07-18
    plugin id 85067
    published 2015-07-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85067
    title Oracle Linux 6 / 7 : bind (ELSA-2015-1513)
  • NASL family Oracle Linux Local Security Checks
    NASL id ORACLELINUX_ELSA-2015-1514.NASL
    description From Red Hat Security Advisory 2015:1514 : Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named (functioning as an authoritative DNS server or a DNS resolver) exit unexpectedly with an assertion failure via a specially crafted DNS request packet. (CVE-2015-5477) Red Hat would like to thank ISC for reporting this issue. Upstream acknowledges Jonathan Foote as the original reporter. All bind users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, the BIND daemon (named) will be restarted automatically.
    last seen 2019-02-21
    modified 2018-07-18
    plugin id 85116
    published 2015-07-30
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85116
    title Oracle Linux 5 : bind (ELSA-2015-1514)
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2015-1514.NASL
    description Updated bind packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named (functioning as an authoritative DNS server or a DNS resolver) exit unexpectedly with an assertion failure via a specially crafted DNS request packet. (CVE-2015-5477) Red Hat would like to thank ISC for reporting this issue. Upstream acknowledges Jonathan Foote as the original reporter. All bind users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, the BIND daemon (named) will be restarted automatically.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 85069
    published 2015-07-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85069
    title RHEL 5 : bind (RHSA-2015:1514)
  • NASL family AIX Local Security Checks
    NASL id AIX_IV75694.NASL
    description ISC BIND is vulnerable to a denial of service, caused by an error in the handling of TKEY queries. By sending specially-crafted packets, a remote attacker could exploit this vulnerability to cause a REQUIRE assertion failure.
    last seen 2019-02-21
    modified 2015-09-13
    plugin id 85417
    published 2015-08-17
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85417
    title AIX 6.1 TL 8 : bind9 (IV75694)
  • NASL family MacOS X Local Security Checks
    NASL id MACOSX_SERVER_4_1_5.NASL
    description The remote Mac OS X host has a version of OS X Server installed that is prior to 4.1.5. It is, therefore, affected by a denial of service vulnerability due to an assertion flaw that occurs when handling TKEY queries. A remote attacker can exploit this, via a specially crafted request, to cause a REQUIRE assertion failure and daemon exit, resulting in a denial of service condition.
    last seen 2019-02-21
    modified 2018-07-14
    plugin id 85410
    published 2015-08-17
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85410
    title Mac OS X : OS X Server < 4.1.5 BIND DoS
  • NASL family Firewalls
    NASL id MCAFEE_FIREWALL_ENTERPRISE_SB10126.NASL
    description The remote host has a version of McAfee Firewall Enterprise installed that is affected by a denial of service vulnerability due to an assertion flaw that occurs when handling TKEY queries. A remote attacker can exploit this, via a specially crafted request, to cause a REQUIRE assertion failure and daemon exit, resulting in a denial of service condition.
    last seen 2019-02-21
    modified 2018-07-14
    plugin id 85402
    published 2015-08-14
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85402
    title McAfee Firewall Enterprise DoS (SB10126)
  • NASL family DNS
    NASL id BIND9_9102_P3.NASL
    description According to its self-reported version number, the installation of ISC BIND on the remote name server is potentially affected by a denial of service vulnerability due to a REQUIRE assertion flaw that occurs while handling TKEY queries. A remote attacker can exploit this by using a specially crafted TKEY query to crash the daemon. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
    last seen 2019-02-21
    modified 2018-06-27
    plugin id 85241
    published 2015-08-05
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85241
    title ISC BIND 9.7.x < 9.9.7-P2 / 9.10.x < 9.10.2-P3 TKEY Query Handling Remote DoS
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2015-12316.NASL
    description Update to 9.9.7-P2 to fix CVE-2015-5477 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2015-10-19
    plugin id 85169
    published 2015-08-03
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85169
    title Fedora 22 : bind99-9.9.7-6.P2.fc22 (2015-12316)
  • NASL family AIX Local Security Checks
    NASL id AIX_IV75966.NASL
    description ISC BIND is vulnerable to a denial of service, caused by an error in the handling of TKEY queries. By sending specially-crafted packets, a remote attacker could exploit this vulnerability to cause a REQUIRE assertion failure.
    last seen 2019-02-21
    modified 2015-09-13
    plugin id 85450
    published 2015-08-18
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85450
    title AIX 5.3 TL 12 : bind9 (IV75966)
  • NASL family Gentoo Local Security Checks
    NASL id GENTOO_GLSA-201510-01.NASL
    description The remote host is affected by the vulnerability described in GLSA-201510-01 (BIND: Denial of Service) A vulnerability has been discovered in BIND’s named utility leading to a Denial of Service condition. Impact : A remote attacker may be able to cause Denial of Service condition via specially constructed zone data. Workaround : There is no known workaround at this time.
    last seen 2019-02-21
    modified 2015-12-19
    plugin id 86435
    published 2015-10-19
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=86435
    title GLSA-201510-01 : BIND: Denial of Service
  • NASL family Ubuntu Local Security Checks
    NASL id UBUNTU_USN-2693-1.NASL
    description Jonathan Foote discovered that Bind incorrectly handled certain TKEY queries. A remote attacker could use this issue with a specially crafted packet to cause Bind to crash, resulting in a denial of service. (CVE-2015-5477) Pories Ediansyah discovered that Bind incorrectly handled certain configurations involving DNS64. A remote attacker could use this issue with a specially crafted query to cause Bind to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. (CVE-2012-5689). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-12-01
    plugin id 85081
    published 2015-07-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85081
    title Ubuntu 12.04 LTS / 14.04 LTS / 15.04 : bind9 vulnerabilities (USN-2693-1)
  • NASL family SuSE Local Security Checks
    NASL id SUSE_SU-2015-1316-1.NASL
    description bind was updated to fix one security issue. This security issue was fixed : - CVE-2015-5477: Remote DoS via TKEY queries (bsc#939567) Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet handling. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-11-29
    plugin id 85151
    published 2015-07-31
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85151
    title SUSE SLES11 Security Update : bind (SUSE-SU-2015:1316-1)
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2015-12335.NASL
    description Update to 9.10.2-P3 to fix CVE-2015-5477 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2015-10-19
    plugin id 85170
    published 2015-08-03
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85170
    title Fedora 22 : bind-9.10.2-4.P3.fc22 (2015-12335)
  • NASL family Oracle Linux Local Security Checks
    NASL id ORACLELINUX_ELSA-2015-1515.NASL
    description From Red Hat Security Advisory 2015:1515 : Updated bind97 packages that fix one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named (functioning as an authoritative DNS server or a DNS resolver) exit unexpectedly with an assertion failure via a specially crafted DNS request packet. (CVE-2015-5477) Red Hat would like to thank ISC for reporting this issue. Upstream acknowledges Jonathan Foote as the original reporter. All bind97 users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, the BIND daemon (named) will be restarted automatically.
    last seen 2019-02-21
    modified 2018-07-18
    plugin id 85117
    published 2015-07-30
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85117
    title Oracle Linux 5 : bind97 (ELSA-2015-1515)
  • NASL family Junos Local Security Checks
    NASL id JUNIPER_JSA10718.NASL
    description According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to a flaw in ISC BIND when handling queries for TKEY records. An unauthenticated, remote attacker can exploit this, via crafted TKEY queries, to cause an REQUIRE assertion failure and daemon exit.
    last seen 2019-02-21
    modified 2018-08-10
    plugin id 88093
    published 2016-01-22
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=88093
    title Juniper Junos TKEY Query Handling DoS (JSA10718)
  • NASL family SuSE Local Security Checks
    NASL id SUSE_SU-2015-1322-1.NASL
    description bind was updated to fix one security issue : CVE-2015-5477: Remote Denial-of-Service via TKEY queries. (bsc#939567) Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet handling. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-11-29
    plugin id 85179
    published 2015-08-03
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85179
    title SUSE SLES10 Security Update : bind (SUSE-SU-2015:1322-1)
  • NASL family F5 Networks Local Security Checks
    NASL id F5_BIGIP_SOL16909.NASL
    description An error in the handling of TKEY queries can be exploited by an attacker for use as a denial-of-service vector, as a constructed packet can use the defect to trigger a REQUIRE assertion failure, causing BIND to exit. (CVE-2015-5477)
    last seen 2019-02-21
    modified 2019-01-04
    plugin id 86011
    published 2015-09-18
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=86011
    title F5 Networks BIG-IP : BIND vulnerability (K16909)
  • NASL family Debian Local Security Checks
    NASL id DEBIAN_DSA-3319.NASL
    description Jonathan Foote discovered that the BIND DNS server does not properly handle TKEY queries. A remote attacker can take advantage of this flaw to mount a denial of service via a specially crafted query triggering an assertion failure and causing BIND to exit.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 85053
    published 2015-07-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85053
    title Debian DSA-3319-1 : bind9 - security update
  • NASL family Scientific Linux Local Security Checks
    NASL id SL_20150729_BIND97_ON_SL5_X.NASL
    description A flaw was found in the way BIND handled requests for TKEY DNS resource records. A remote attacker could use this flaw to make named (functioning as an authoritative DNS server or a DNS resolver) exit unexpectedly with an assertion failure via a specially crafted DNS request packet. (CVE-2015-5477) After installing the update, the BIND daemon (named) will be restarted automatically.
    last seen 2019-02-21
    modified 2018-12-28
    plugin id 85119
    published 2015-07-30
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85119
    title Scientific Linux Security Update : bind97 on SL5.x i386/x86_64
  • NASL family SuSE Local Security Checks
    NASL id OPENSUSE-2015-530.NASL
    description bind was updated to fix one security issue. This security issue was fixed : - CVE-2015-5477: Remote DoS via TKEY queries (boo#939567) Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet handling.
    last seen 2019-02-21
    modified 2015-09-13
    plugin id 85187
    published 2015-08-04
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85187
    title openSUSE Security Update : bind (openSUSE-2015-530)
  • NASL family Amazon Linux Local Security Checks
    NASL id ALA_ALAS-2015-573.NASL
    description As reported upstream, an error in the handling of TKEY queries can be exploited by an attacker for use as a denial-of-service vector, as a constructed packet can use the defect to trigger a REQUIRE assertion failure, causing BIND to exit.
    last seen 2019-02-21
    modified 2018-12-18
    plugin id 85044
    published 2015-07-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85044
    title Amazon Linux AMI : bind (ALAS-2015-573)
  • NASL family SuSE Local Security Checks
    NASL id SUSE_SU-2015-1304-1.NASL
    description bind was updated to fix one security issue. This security issue was fixed : - CVE-2015-5477: Remote DoS via TKEY queries (bsc#939567) Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the exploitable code occurs early in the packet handling. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-11-29
    plugin id 85121
    published 2015-07-30
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=85121
    title SUSE SLED11 / SLES11 Security Update : bind (SUSE-SU-2015:1304-1)
packetstorm via4
data source https://packetstormsecurity.com/files/download/132926/tkey_dos.py.txt
id PACKETSTORM:132926
last seen 2016-12-05
published 2015-07-31
reporter Lorenzo Corsini
source https://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html
title BIND TKEY Query Denial Of Service
redhat via4
advisories
  • bugzilla
    id 1247361
    title CVE-2015-5477 bind: TKEY query handling flaw leading to denial of service
    oval
    OR
    • AND
      • OR
        • comment Red Hat Enterprise Linux 6 Client is installed
          oval oval:com.redhat.rhsa:tst:20100842001
        • comment Red Hat Enterprise Linux 6 Server is installed
          oval oval:com.redhat.rhsa:tst:20100842002
        • comment Red Hat Enterprise Linux 6 Workstation is installed
          oval oval:com.redhat.rhsa:tst:20100842003
        • comment Red Hat Enterprise Linux 6 ComputeNode is installed
          oval oval:com.redhat.rhsa:tst:20100842004
      • OR
        • AND
          • comment bind is earlier than 32:9.8.2-0.37.rc1.el6_7.2
            oval oval:com.redhat.rhsa:tst:20151513011
          • comment bind is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20100975006
        • AND
          • comment bind-chroot is earlier than 32:9.8.2-0.37.rc1.el6_7.2
            oval oval:com.redhat.rhsa:tst:20151513009
          • comment bind-chroot is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20100975012
        • AND
          • comment bind-devel is earlier than 32:9.8.2-0.37.rc1.el6_7.2
            oval oval:com.redhat.rhsa:tst:20151513005
          • comment bind-devel is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20100975010
        • AND
          • comment bind-libs is earlier than 32:9.8.2-0.37.rc1.el6_7.2
            oval oval:com.redhat.rhsa:tst:20151513015
          • comment bind-libs is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20100975016
        • AND
          • comment bind-sdb is earlier than 32:9.8.2-0.37.rc1.el6_7.2
            oval oval:com.redhat.rhsa:tst:20151513013
          • comment bind-sdb is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20100975014
        • AND
          • comment bind-utils is earlier than 32:9.8.2-0.37.rc1.el6_7.2
            oval oval:com.redhat.rhsa:tst:20151513007
          • comment bind-utils is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20100975008
    • AND
      • OR
        • comment Red Hat Enterprise Linux 7 Client is installed
          oval oval:com.redhat.rhsa:tst:20140675001
        • comment Red Hat Enterprise Linux 7 Server is installed
          oval oval:com.redhat.rhsa:tst:20140675002
        • comment Red Hat Enterprise Linux 7 Workstation is installed
          oval oval:com.redhat.rhsa:tst:20140675003
        • comment Red Hat Enterprise Linux 7 ComputeNode is installed
          oval oval:com.redhat.rhsa:tst:20140675004
      • OR
        • AND
          • comment bind is earlier than 32:9.9.4-18.el7_1.3
            oval oval:com.redhat.rhsa:tst:20151513032
          • comment bind is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20100975006
        • AND
          • comment bind-chroot is earlier than 32:9.9.4-18.el7_1.3
            oval oval:com.redhat.rhsa:tst:20151513028
          • comment bind-chroot is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20100975012
        • AND
          • comment bind-devel is earlier than 32:9.9.4-18.el7_1.3
            oval oval:com.redhat.rhsa:tst:20151513022
          • comment bind-devel is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20100975010
        • AND
          • comment bind-libs is earlier than 32:9.9.4-18.el7_1.3
            oval oval:com.redhat.rhsa:tst:20151513029
          • comment bind-libs is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20100975016
        • AND
          • comment bind-libs-lite is earlier than 32:9.9.4-18.el7_1.3
            oval oval:com.redhat.rhsa:tst:20151513030
          • comment bind-libs-lite is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20141984041
        • AND
          • comment bind-license is earlier than 32:9.9.4-18.el7_1.3
            oval oval:com.redhat.rhsa:tst:20151513033
          • comment bind-license is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20141984029
        • AND
          • comment bind-lite-devel is earlier than 32:9.9.4-18.el7_1.3
            oval oval:com.redhat.rhsa:tst:20151513026
          • comment bind-lite-devel is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20141984039
        • AND
          • comment bind-sdb is earlier than 32:9.9.4-18.el7_1.3
            oval oval:com.redhat.rhsa:tst:20151513021
          • comment bind-sdb is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20100975014
        • AND
          • comment bind-sdb-chroot is earlier than 32:9.9.4-18.el7_1.3
            oval oval:com.redhat.rhsa:tst:20151513023
          • comment bind-sdb-chroot is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20141984035
        • AND
          • comment bind-utils is earlier than 32:9.9.4-18.el7_1.3
            oval oval:com.redhat.rhsa:tst:20151513025
          • comment bind-utils is signed with Red Hat redhatrelease2 key
            oval oval:com.redhat.rhsa:tst:20100975008
    rhsa
    id RHSA-2015:1513
    released 2015-07-28
    severity Important
    title RHSA-2015:1513: bind security update (Important)
  • bugzilla
    id 1247361
    title CVE-2015-5477 bind: TKEY query handling flaw leading to denial of service
    oval
    AND
    • comment Red Hat Enterprise Linux 5 is installed
      oval oval:com.redhat.rhsa:tst:20070055001
    • OR
      • AND
        • comment bind is earlier than 30:9.3.6-25.P1.el5_11.3
          oval oval:com.redhat.rhsa:tst:20151514004
        • comment bind is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20070057003
      • AND
        • comment bind-chroot is earlier than 30:9.3.6-25.P1.el5_11.3
          oval oval:com.redhat.rhsa:tst:20151514002
        • comment bind-chroot is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20070057005
      • AND
        • comment bind-devel is earlier than 30:9.3.6-25.P1.el5_11.3
          oval oval:com.redhat.rhsa:tst:20151514008
        • comment bind-devel is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20070057007
      • AND
        • comment bind-libbind-devel is earlier than 30:9.3.6-25.P1.el5_11.3
          oval oval:com.redhat.rhsa:tst:20151514010
        • comment bind-libbind-devel is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20070057015
      • AND
        • comment bind-libs is earlier than 30:9.3.6-25.P1.el5_11.3
          oval oval:com.redhat.rhsa:tst:20151514016
        • comment bind-libs is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20070057017
      • AND
        • comment bind-sdb is earlier than 30:9.3.6-25.P1.el5_11.3
          oval oval:com.redhat.rhsa:tst:20151514006
        • comment bind-sdb is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20070057009
      • AND
        • comment bind-utils is earlier than 30:9.3.6-25.P1.el5_11.3
          oval oval:com.redhat.rhsa:tst:20151514012
        • comment bind-utils is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20070057011
      • AND
        • comment caching-nameserver is earlier than 30:9.3.6-25.P1.el5_11.3
          oval oval:com.redhat.rhsa:tst:20151514014
        • comment caching-nameserver is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20070057013
    rhsa
    id RHSA-2015:1514
    released 2015-07-28
    severity Important
    title RHSA-2015:1514: bind security update (Important)
  • bugzilla
    id 1247361
    title CVE-2015-5477 bind: TKEY query handling flaw leading to denial of service
    oval
    AND
    • comment Red Hat Enterprise Linux 5 is installed
      oval oval:com.redhat.rhsa:tst:20070055001
    • OR
      • AND
        • comment bind97 is earlier than 32:9.7.0-21.P2.el5_11.2
          oval oval:com.redhat.rhsa:tst:20151515006
        • comment bind97 is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20110845003
      • AND
        • comment bind97-chroot is earlier than 32:9.7.0-21.P2.el5_11.2
          oval oval:com.redhat.rhsa:tst:20151515010
        • comment bind97-chroot is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20110845005
      • AND
        • comment bind97-devel is earlier than 32:9.7.0-21.P2.el5_11.2
          oval oval:com.redhat.rhsa:tst:20151515008
        • comment bind97-devel is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20110845007
      • AND
        • comment bind97-libs is earlier than 32:9.7.0-21.P2.el5_11.2
          oval oval:com.redhat.rhsa:tst:20151515004
        • comment bind97-libs is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20110845009
      • AND
        • comment bind97-utils is earlier than 32:9.7.0-21.P2.el5_11.2
          oval oval:com.redhat.rhsa:tst:20151515002
        • comment bind97-utils is signed with Red Hat redhatrelease key
          oval oval:com.redhat.rhsa:tst:20110845011
    rhsa
    id RHSA-2015:1515
    released 2015-07-28
    severity Important
    title RHSA-2015:1515: bind97 security update (Important)
  • rhsa
    id RHSA-2016:0078
  • rhsa
    id RHSA-2016:0079
rpms
  • bind-32:9.8.2-0.37.rc1.el6_7.2
  • bind-chroot-32:9.8.2-0.37.rc1.el6_7.2
  • bind-devel-32:9.8.2-0.37.rc1.el6_7.2
  • bind-libs-32:9.8.2-0.37.rc1.el6_7.2
  • bind-sdb-32:9.8.2-0.37.rc1.el6_7.2
  • bind-utils-32:9.8.2-0.37.rc1.el6_7.2
  • bind-32:9.9.4-18.el7_1.3
  • bind-chroot-32:9.9.4-18.el7_1.3
  • bind-devel-32:9.9.4-18.el7_1.3
  • bind-libs-32:9.9.4-18.el7_1.3
  • bind-libs-lite-32:9.9.4-18.el7_1.3
  • bind-license-32:9.9.4-18.el7_1.3
  • bind-lite-devel-32:9.9.4-18.el7_1.3
  • bind-sdb-32:9.9.4-18.el7_1.3
  • bind-sdb-chroot-32:9.9.4-18.el7_1.3
  • bind-utils-32:9.9.4-18.el7_1.3
  • bind-30:9.3.6-25.P1.el5_11.3
  • bind-chroot-30:9.3.6-25.P1.el5_11.3
  • bind-devel-30:9.3.6-25.P1.el5_11.3
  • bind-libbind-devel-30:9.3.6-25.P1.el5_11.3
  • bind-libs-30:9.3.6-25.P1.el5_11.3
  • bind-sdb-30:9.3.6-25.P1.el5_11.3
  • bind-utils-30:9.3.6-25.P1.el5_11.3
  • caching-nameserver-30:9.3.6-25.P1.el5_11.3
  • bind97-32:9.7.0-21.P2.el5_11.2
  • bind97-chroot-32:9.7.0-21.P2.el5_11.2
  • bind97-devel-32:9.7.0-21.P2.el5_11.2
  • bind97-libs-32:9.7.0-21.P2.el5_11.2
  • bind97-utils-32:9.7.0-21.P2.el5_11.2
refmap via4
bid 76092
confirm
debian DSA-3319
exploit-db
  • 37721
  • 37723
fedora
  • FEDORA-2015-12316
  • FEDORA-2015-12335
  • FEDORA-2015-12357
gentoo GLSA-201510-01
hp
  • HPSBOV03506
  • HPSBUX03400
  • HPSBUX03410
  • HPSBUX03511
  • SSRT102175
  • SSRT102211
  • SSRT102248
misc http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html
sectrack 1033100
suse
  • SUSE-SU-2015:1304
  • SUSE-SU-2015:1305
  • SUSE-SU-2015:1316
  • SUSE-SU-2015:1322
  • SUSE-SU-2016:0227
  • openSUSE-SU-2015:1326
  • openSUSE-SU-2015:1335
ubuntu USN-2693-1
Last major update 30-12-2016 - 21:59
Published 29-07-2015 - 10:59
Last modified 09-11-2017 - 21:29
Back to Top