ISC BIND Data Processing Errors Vulnerability

高 7.5悪用確認済み（CISA KEV）CVE-2015-5477 · 29/07/2015 公開 · 09/10/2026 更新

ISC BIND Data Processing Errors Vulnerability. 悪用が確認されています：CISA は 08/10/2026 にこの脆弱性を「既知の悪用された脆弱性（KEV）」カタログに追加しました。影響を受けるシステムは緊急に修正してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
dns hpe	`= 9.2.3= 9.3`	修正版なし
vcx hpe	`< 9.8.18`	`9.8.18`
bind isc	`= 9.10.2≥ 9.1.0, < 9.9.7≥ 9.10.0, < 9.10.2`	`9.9.79.10.2`
vm server oracle	`= 3.2`	修正版なし
linux enterprise debuginfo suse	`= 11`	修正版なし

概要

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

参考情報

kb.juniper.net/InfoCenter/index · Mitigation
lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html · Mailing List
lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html · Mailing List
lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html · Mailing List
marc.info · Mailing List
marc.info · Mailing List
marc.info · Mailing List
marc.info · Mailing List
packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2015-1513.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2015-1514.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2015-1515.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2016-0078.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2016-0079.html · Third Party Advisory
debian.org/security/2015/dsa-3319 · Mailing List
oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html · Third Party Advisory
oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html · Third Party Advisory
securityfocus.com/bid/76092 · Third Party Advisory
securitytracker.com/id/1033100 · Broken Link
ubuntu.com/usn/USN-2693-1 · Third Party Advisory
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay · Third Party Advisory
h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay · Third Party Advisory
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay · Third Party Advisory
kb.isc.org/article/AA-01272 · Patch
kb.isc.org/article/AA-01305 · Broken Link
kb.isc.org/article/AA-01306 · Broken Link
kb.isc.org/article/AA-01307 · Broken Link
kb.isc.org/article/AA-01438 · Broken Link
kb.juniper.net/JSA10783 · Third Party Advisory
kc.mcafee.com/corporate/index · Broken Link
security.gentoo.org/glsa/201510-01 · Third Party Advisory
security.netapp.com/advisory/ntap-20160114-0001 · Third Party Advisory
support.apple.com/kb/HT205032 · Third Party Advisory
exploit-db.com/exploits/37721 · Exploit
exploit-db.com/exploits/37723 · Third Party Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2015-5477

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン