CVE-2015-5477: ISC BIND denial of service via TKEY queries

CVE-2015-5477 · Severity: critical · Exploited in the wild · Published 2026-10-08

ISC BIND is DNS server software that processes domain name queries for organizations worldwide. A flaw in how BIND handles TKEY (Temporary Key) queries allows remote attackers to crash the server, causing DNS service outages and impacting any services that depend on DNS resolution.

Technologies: Isc Bind. Vendors: Isc.

Quick answers

Is CVE-2015-5477 exploited in the wild?
Yes. CVE-2015-5477 is known to be exploited in the wild, first recorded on 8 October 2026. Treat it as urgent.
How severe is CVE-2015-5477?
Critical severity, published 8 October 2026.
Which products and versions are affected?
ISC BIND.
Is there a fix for CVE-2015-5477?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2015-5477 attacked?
It is attacked over the network, in a hosted service.
Am I affected by CVE-2015-5477?
Check whether you run Isc Bind. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

ISC BIND contains a data processing error in TKEY query handling that leads to a denial of service condition. The vulnerability can be triggered remotely via specially crafted TKEY queries without authentication, allowing an attacker to cause the BIND daemon to crash and become unavailable.

Affected products

  • ISC BIND

Timeline

  • 2015-08-11: disclosed
  • 2015-08-11: exploited
  • 2026-10-08: advisory

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.