CVE-2015-5477: juniper junos, fedoraproject fedora, redhat enterprise_linux

CVSS 7.5 (high) · listed as exploited by CISA since 2026-10-08 · published 2015-07-29

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

Affected products (NVD): juniper junos, fedoraproject fedora, redhat enterprise_linux, redhat enterprise_linux_aus, debian debian_linux, oracle vm_server, oracle solaris, hp hp-ux, canonical ubuntu_linux, netapp clustered_data_ontap, apple os_x_server, hpe dns, hp openvms, hpe vcx, suse linux_enterprise_debuginfo, opensuse evergreen, opensuse opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit

Fixed in (NVD): 12.1, 13.2, 9.8.18, 9.9.7, 9.10.2

Weakness: CWE-19, CWE-617

Source: NVD CVE-2015-5477

References

• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718
• http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html
• http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html
• http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html
• http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.