Source: cisa.gov
CVE-2015-5477 is a data processing error vulnerability in ISC BIND that allows remote attackers to cause a denial of service via specially crafted TKEY queries. The vulnerability affects the BIND DNS server software, which is widely used across many platforms and distributions. Exploitation can result in a crash of the named daemon, disrupting DNS resolution services. The vulnerability is notable for its potential broad impact given BIND's widespread use as an open-source component embedded in various products, including those from Juniper Networks. Red Hat issued a security errata (RHSA-2015:1513) addressing the flaw. CISA has listed this vulnerability in its Known Exploited Vulnerabilities catalog, and it falls under BOD 26-04 prioritization requirements. The vulnerability is remotely exploitable without authentication, making it particularly dangerous for internet-facing DNS infrastructure.
