# CVE-2015-5477: ISC BIND denial of service via TKEY queries

Source: https://junglewise.ai/threats/cve-2015-5477-isc-bind-data-processing-errors-vulnerability  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-08. Updated: 2026-10-08  
License: CC BY 4.0 with a link back

CVE-2015-5477 · Severity: critical · Exploited in the wild · Published 2026-10-08

ISC BIND is DNS server software that processes domain name queries for organizations worldwide. A flaw in how BIND handles TKEY (Temporary Key) queries allows remote attackers to crash the server, causing DNS service outages and impacting any services that depend on DNS resolution.

Technologies: [Isc Bind](https://junglewise.ai/threats/technologies/bind). Vendors: [Isc](https://junglewise.ai/threats/vendors/isc).

## Quick answers

**Is CVE-2015-5477 exploited in the wild?** Yes. CVE-2015-5477 is known to be exploited in the wild, first recorded on 8 October 2026. Treat it as urgent.

**How severe is CVE-2015-5477?** Critical severity, published 8 October 2026.

**Which products and versions are affected?** ISC BIND.

**Is there a fix for CVE-2015-5477?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2015-5477 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2015-5477?** Check whether you run Isc Bind. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

ISC BIND contains a data processing error in TKEY query handling that leads to a denial of service condition. The vulnerability can be triggered remotely via specially crafted TKEY queries without authentication, allowing an attacker to cause the BIND daemon to crash and become unavailable.

## Affected products

- ISC BIND

## Timeline

- 2015-08-11: disclosed
- 2015-08-11: exploited
- 2026-10-08: advisory

## Related threats

- [BIND assertion failure with redirect zone and qname-minimization](https://junglewise.ai/threats/cve-2026-96888-a-bind-resolver-that-is-configured-with-both-a-redirect-zone-and)
- [BIND named GSS-TSIG replay heap corruption](https://junglewise.ai/threats/cve-2026-94300-replaying-gss-tsig-signed-udp-messages-can-result-in-memory)
- [ISC BIND resolver DNS message processing denial of service](https://junglewise.ai/threats/cve-2026-19630-in-a-bind-resolver-inbound-dns-protocol-messages-with-a)
- [BIND resolver crash on DNSSEC-signed wildcard with NSEC mismatch](https://junglewise.ai/threats/cve-2026-80274-bind-resolver-crash-on-dnssec-signed-wildcard-with-nsec-mismatch)
- [ISC BIND DNSSEC validation bypass with NSEC3 forgery](https://junglewise.ai/threats/cve-2026-77119-isc-bind-dnssec-validation-bypass-with-nsec3-forgery)