PT-2015-6934 · Isc+9 · Isc Bind 9.X+9

Elceef · Published 2015-07-28 · Updated 2024-06-15 · CVE-2015-5477

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ISC BIND 9.x versions 9.9.7 through 9.9.7-P1 ISC BIND 9.x version 9.10.x through 9.10.2-P2

Description The issue allows remote attackers to cause a denial of service via TKEY queries, resulting in a REQUIRE assertion failure and daemon exit. By sending specially-crafted packets, a remote attacker could exploit this to cause the daemon to exit.

Recommendations For ISC BIND 9.x versions 9.9.7 through 9.9.7-P1, update to version 9.9.7-P2 or later. For ISC BIND 9.x version 9.10.x through 9.10.2-P2, update to version 9.10.2-P3 or later. As a temporary workaround, consider restricting access to TKEY queries until a patch is available.

Exploit

Fix

DoS

Weakness Enumeration

CWE-19

Related Identifiers

ALT-PU-2015-1641

ALT-PU-2017-1055

BINDUDPDOS

CESA-2015_1513

CVE-2015-5477

DLA-285-1

DSA-3319-1

ELSA-2015-1513

HPSBUX03400

HPSBUX03410

HPSBUX03511

MGASA-2015-0298

OPENSUSE-SU-2015_1335-1

OPENSUSE-SU-2024:10467-1

RHSA-2015:1513

RHSA-2015:1514

RHSA-2015:1515

RHSA-2015_1513

RHSA-2015_1514

RHSA-2015_1515

RHSA-2016:0078

RHSA-2016:0079

SUSE-SU-2015:1304-1

SUSE-SU-2015:1305-1

SUSE-SU-2015:1316-1

SUSE-SU-2015_1304-1

SUSE-SU-2015_1305-1

SUSE-SU-2015_1316-1

SUSE-SU-2015_1322-1

SUSE-SU-2016_0227-1

USN-2693-1

Affected Products

Alt Linux

Bind Server

Centos

Hp-Ux

Ibm Aix

Isc Bind 9.X

Junos

Red Hat

Suse

Ubuntu

References · 118

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/dns/bind_tsig_badtime.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/dns/bind_tkey.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/dns/bind_tsig.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/pull/7382/files · Exploit
• 🔥 https://github.com/robertdavidgraham/cve-2015-5477 · Exploit
• 🔥 https://github.com/knqyf263/CVE-2020-8617 · Exploit
• 🔥 https://github.com/infobyte/CVE-2016-2776 · Exploit
• 🔥 https://github.com/elceef/tkeypoc · Exploit
• 🔥 https://github.com/sischkg/cve-2018-5740 · Exploit
• 🔥 https://exploit-db.com/exploits/37723 · Exploit
• 🔥 https://exploit-db.com/exploits/37721 · Exploit
• http://debian.org/security/2015/dsa-3319 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-5477 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-5477 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-5477 · Vendor Advisory