CVE-2015-5477

Description

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

CVSS breakdown

Affected products

• Apple / os_x_server4.1.5 – 4.1.5
• Canonical / Ubuntu Linux12.04 – 12.04
• Debian / debian_linux7.0 – 7.0
• Debian / debian_linux8.0 – 8.0
• fedoraproject / fedora22 – 22
• fedoraproject / fedora21 – 21
• HP / hp-ux11.23 – 11.23
• HP / hp-ux11.31 – 11.31
• HP / hp-ux11.11 – 11.11
• HP / openvms5.7 – 5.7
• HPE / dns9.2.3 – 9.2.3
• HPE / dns9.3 – 9.3
• HPE / vcx9.8.18
• ISC / BIND9.1.0 – 9.9.7
• ISC / BIND9.10.2 – 9.10.2
• Juniper / junos12.1x45 – 12.1x45
• Juniper / junos12.1x45 – 12.1x45
• Juniper / junos12.1x45 – 12.1x45
• Juniper / junos12.1x45 – 12.1x45
• Juniper / junos12.1x45 – 12.1x45
• Juniper / junos12.1x46 – 12.1x46
• Juniper / junos12.1x46 – 12.1x46
• Juniper / junos12.1x46 – 12.1x46
• Juniper / junos12.1x46 – 12.1x46
• Juniper / junos12.1x46 – 12.1x46
• Juniper / junos12.1x46 – 12.1x46
• Juniper / junos12.1x46 – 12.1x46
• Juniper / junos12.1x47 – 12.1x47
• Juniper / junos12.1x47 – 12.1x47
• Juniper / junos12.1x47 – 12.1x47
• Juniper / junos12.1x47 – 12.1x47
• Juniper / junos12.1x47 – 12.1x47
• Juniper / junos12.3 – 12.3
• Juniper / junos12.3 – 12.3
• Juniper / junos12.3 – 12.3
• Juniper / junos12.3 – 12.3
• Juniper / junos12.3 – 12.3
• Juniper / junos12.3x48 – 12.3x48
• Juniper / junos12.1
• Juniper / junos12.3x48 – 12.3x48
• Juniper / junos12.3x50 – 12.3x50
• Juniper / junos12.3x50 – 12.3x50
• Juniper / junos12.3x50 – 12.3x50
• Juniper / junos12.3x50 – 12.3x50
• Juniper / junos12.3x50 – 12.3x50
• Juniper / junos12.3x50 – 12.3x50
• Juniper / junos13.2 – 13.2
• Juniper / junos13.2 – 13.2
• Juniper / junos13.2 – 13.2
• Juniper / junos13.2 – 13.2
• Juniper / junos13.2 – 13.2
• Juniper / junos13.2 – 13.2
• Juniper / junos13.2 – 13.2
• Juniper / junos13.2 – 13.2
• Juniper / junos13.2 – 13.2
• Juniper / junos13.2 – 13.2
• Juniper / junos13.2 – 13.2
• Juniper / junos13.2x51 – 13.2x51
• Juniper / junos13.2x51 – 13.2x51
• Juniper / junos13.2x51 – 13.2x51
• Juniper / junos13.2x51 – 13.2x51
• Juniper / junos13.2x51 – 13.2x51
• Juniper / junos13.2x51 – 13.2x51
• Juniper / junos13.2x51 – 13.2x51
• Juniper / junos13.2x51 – 13.2x51
• Juniper / junos13.2x51 – 13.2x51
• Juniper / junos14.1 – 14.1
• Juniper / junos14.1 – 14.1
• Juniper / junos14.1 – 14.1
• Juniper / junos14.1 – 14.1
• Juniper / junos14.1 – 14.1
• Juniper / junos14.1 – 14.1
• Juniper / junos14.1x50 – 14.1x50
• Juniper / junos14.1x50 – 14.1x50
• Juniper / junos14.1x51 – 14.1x51
• Juniper / junos14.1x51 – 14.1x51
• Juniper / junos14.1x53 – 14.1x53
• Juniper / junos14.1x53 – 14.1x53
• Juniper / junos14.1x53 – 14.1x53
• Juniper / junos14.1x53 – 14.1x53
• Juniper / junos14.1x53 – 14.1x53
• Juniper / junos14.1x53 – 14.1x53
• Juniper / junos14.1x53 – 14.1x53
• Juniper / junos14.1x53 – 14.1x53
• Juniper / junos14.1x53 – 14.1x53
• Juniper / junos14.2 – 14.2
• Juniper / junos14.2 – 14.2
• Juniper / junos14.2 – 14.2
• Juniper / junos14.2 – 14.2
• Juniper / junos14.2 – 14.2
• Juniper / junos14.2 – 14.2
• Juniper / junos15.1 – 15.1
• Juniper / junos15.1 – 15.1
• Juniper / junos15.1 – 15.1
• Juniper / junos15.1 – 15.1
• Juniper / junos15.1 – 15.1
• Juniper / junos15.1 – 15.1
• Juniper / junos15.1 – 15.1
• Juniper / junos15.1 – 15.1
• Juniper / junos15.1 – 15.1
• Juniper / junos15.1 – 15.1
• Juniper / junos15.1 – 15.1
• Juniper / junos15.1x49 – 15.1x49
• Juniper / junos15.1x49 – 15.1x49
• Juniper / junos15.1x49 – 15.1x49
• Juniper / junos15.1x49 – 15.1x49
• Juniper / junos15.1x49 – 15.1x49
• Juniper / junos15.1x53 – 15.1x53
• Juniper / junos15.1x53 – 15.1x53
• Juniper / junos12.3x48 – 12.3x48
• Juniper / junos12.1 – 12.1
• Juniper / junos12.1 – 12.1
• Juniper / junos12.1r – 12.1r
• Juniper / junos12.1x44 – 12.1x44
• Juniper / junos12.1x44 – 12.1x44
• Juniper / junos12.1x44 – 12.1x44
• Juniper / junos12.1x44 – 12.1x44
• Juniper / junos12.1x44 – 12.1x44
• Juniper / junos12.1x44 – 12.1x44
• Juniper / junos12.1x44 – 12.1x44
• Juniper / junos12.1x44 – 12.1x44
• Juniper / junos12.1x44 – 12.1x44
• Juniper / junos12.1x44 – 12.1x44
• Juniper / junos12.1x45 – 12.1x45
• NetApp / Clustered Data ONTAP
• openSUSE / evergreen11.4 – 11.4
• openSUSE / opensuse13.1 – 13.1
• openSUSE / opensuse13.2 – 13.2
• oracle / solaris10 – 10
• oracle / solaris11.2 – 11.2
• oracle / vm_server3.2 – 3.2
• RedHat / enterprise_linux5.0 – 5.0
• RedHat / enterprise_linux7.0 – 7.0
• RedHat / enterprise_linux6.0 – 6.0
• RedHat / enterprise_linux_aus6.6 – 6.6
• RedHat / enterprise_linux_aus6.4 – 6.4
• RedHat / enterprise_linux_aus6.5 – 6.5
• SUSE / linux_enterprise_debuginfo11 – 11
• SUSE / linux_enterprise_debuginfo11 – 11
• SUSE / linux_enterprise_desktop12 – 12
• SUSE / linux_enterprise_desktop11 – 11
• SUSE / linux_enterprise_desktop11 – 11
• SUSE / linux_enterprise_server11 – 11
• SUSE / linux_enterprise_server11 – 11
• SUSE / linux_enterprise_server11 – 11
• SUSE / linux_enterprise_server11 – 11
• SUSE / linux_enterprise_server12 – 12
• SUSE / linux_enterprise_server10 – 10
• SUSE / linux_enterprise_server11 – 11
• SUSE / linux_enterprise_software_development_kit12 – 12
• SUSE / linux_enterprise_software_development_kit11 – 11
• SUSE / linux_enterprise_software_development_kit11 – 11

Exploits & proofs of concept

• exploit-dbISC BIND 9 - TKEY Remote Denial of Service (PoC)by elceef
• exploit-dbISC BIND 9 - TKEY (PoC)by Errata Security

References

• EXPLOIThttp://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html
• VENDOR_ADVISORYhttp://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
• MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html
• MISChttps://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415
• MISChttps://kb.juniper.net/JSA10783
• MISChttp://rhn.redhat.com/errata/RHSA-2015-1513.html
• MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html
• MISChttps://security.netapp.com/advisory/ntap-20160114-0001/
• MISChttps://kb.isc.org/article/AA-01438
• MAILING_LISThttp://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html
• MAILING_LISThttp://marc.info/?l=bugtraq&m=144017354030745&w=2
• MAILING_LISThttp://marc.info/?l=bugtraq&m=144294073801304&w=2
• MISChttp://rhn.redhat.com/errata/RHSA-2016-0079.html
• MISChttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918
• VENDOR_ADVISORYhttp://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html
• MISChttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718
• MISChttp://rhn.redhat.com/errata/RHSA-2015-1514.html
• VENDOR_ADVISORYhttp://www.ubuntu.com/usn/USN-2693-1
• VENDOR_ADVISORYhttps://support.apple.com/kb/HT205032
• MISChttp://www.securitytracker.com/id/1033100
• MISChttps://kb.isc.org/article/AA-01307
• MISChttp://www.securityfocus.com/bid/76092
• MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html
• MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html
• MAILING_LISThttp://marc.info/?l=bugtraq&m=144294073801304&w=2
• EXPLOIThttps://www.exploit-db.com/exploits/37721/
• MISChttp://rhn.redhat.com/errata/RHSA-2015-1515.html
• MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html
• MISChttps://security.gentoo.org/glsa/201510-01
• MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html
• MAILING_LISThttp://marc.info/?l=bugtraq&m=144181171013996&w=2
• MAILING_LISThttp://marc.info/?l=bugtraq&m=144017354030745&w=2
• MISChttps://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480
• VENDOR_ADVISORYhttp://www.debian.org/security/2015/dsa-3319
• MAILING_LISThttp://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html
• MAILING_LISThttp://marc.info/?l=bugtraq&m=144000632319155&w=2
• MAILING_LISThttp://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html
• EXPLOIThttps://www.exploit-db.com/exploits/37723/
• MISChttps://kb.isc.org/article/AA-01305
• MISChttp://rhn.redhat.com/errata/RHSA-2016-0078.html
• MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html
• MISChttps://kb.isc.org/article/AA-01306
• MISChttps://kc.mcafee.com/corporate/index?page=content&id=SB10126
• MISChttps://kb.isc.org/article/AA-01272
• MAILING_LISThttp://marc.info/?l=bugtraq&m=144000632319155&w=2