Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2015-5477

EPSS 92.75% · P100
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2015-5477

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
ISC BIND 拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ISC BIND是美国Internet Systems Consortium（ISC）公司所维护的一套实现了DNS协议的开源软件。 ISC BIND 9.9.7-P1及之前版本和9.10.2-P2及之前版本的named中存在安全漏洞。远程攻击者可借助TKEY查询利用该漏洞造成拒绝服务（REQUIRE断言失败和守护进程退出）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2015-5477

#POC DescriptionSource LinkShenlong Link
1PoC exploit for CVE-2015-5477 BIND9 TKEY assertion failurehttps://github.com/robertdavidgraham/cve-2015-5477POC Details
2PoC exploit code for CVE-2015-5477 BIND9 TKEY remote DoS vulnerabilityhttps://github.com/elceef/tkeypocPOC Details
3Vulnerability as a service: showcasing CVS-2015-5447, a DDoS condition in the bind9 softwarehttps://github.com/hmlio/vaas-cve-2015-5477POC Details
4PoC for BIND9 TKEY assert DoS (CVE-2015-5477)https://github.com/knqyf263/cve-2015-5477POC Details
5PoC exploit for CVE-2015-5477 in phphttps://github.com/ilanyu/cve-2015-5477POC Details
6Nonehttps://github.com/likescam/ShareDoc_cve-2015-5477POC Details
7Exploit code for CVE-2015-5477 POChttps://github.com/xycloops123/TKEY-remote-DoS-vulnerability-exploitPOC Details
8Nonehttps://github.com/likekabin/ShareDoc_cve-2015-5477POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-5477

请登录查看更多情报信息。

Same Patch Batch · n/a · 2015-07-29 · 10 CVEs total

CVE-2015-2977Webservice-DIC yoyaku_v41 输入验证漏洞
CVE-2015-2978Webservice-DIC yoyaku_v41 授权问题漏洞
CVE-2015-2979Webservice-DIC yoyaku_v41 操作系统命令注入漏洞
CVE-2015-4286Cisco UCS Central Software 输入验证漏洞
CVE-2015-4290Cisco AnyConnect Secure Mobility Client 缓冲区溢出漏洞
CVE-2015-0732多款Cisco产品跨站脚本漏洞
CVE-2015-2974LEMON-S PHP Gazou BBS plus 输入验证漏洞
CVE-2015-4287Cisco Firepower 9000 Series设备权限许可和访问控制漏洞
CVE-2015-4288多款Cisco产品加密问题漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2015-5477

No comments yet

Leave a comment