جزئیات آسیبپذیری
CVE-2015-5477
بهرهبرداری فعالISC BIND
CVSS 3.1
7.5بالا
نمای کلی
اکسپلویتهای عمومی
اخبار مرتبط
خط زمانی
خلاصهی فارسی
خلاصهی فارسی برای این آسیبپذیری هنوز تهیه نشده است.
شرح رسمی (انگلیسی)
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.5بالا | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
محصولات آسیبپذیر
| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| اطلاعات محصول ثبت نشده است. | |||
منابع و راهنماها
۴۳- http://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.html x_refsource_MISC
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html x_refsource_CONFIRM
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.html vendor-advisoryx_refsource_SUSE
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415 x_refsource_CONFIRM
- https://kb.juniper.net/JSA10783 x_refsource_CONFIRM
- http://rhn.redhat.com/errata/RHSA-2015-1513.html vendor-advisoryx_refsource_REDHAT
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.html vendor-advisoryx_refsource_SUSE
- https://security.netapp.com/advisory/ntap-20160114-0001/ x_refsource_CONFIRM
- https://kb.isc.org/article/AA-01438 x_refsource_CONFIRM
- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.html vendor-advisoryx_refsource_FEDORA
- http://rhn.redhat.com/errata/RHSA-2016-0079.html vendor-advisoryx_refsource_REDHAT
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918 x_refsource_CONFIRM
- http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html x_refsource_CONFIRM
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718 x_refsource_CONFIRM
- http://rhn.redhat.com/errata/RHSA-2015-1514.html vendor-advisoryx_refsource_REDHAT
- http://www.ubuntu.com/usn/USN-2693-1 vendor-advisoryx_refsource_UBUNTU
- https://support.apple.com/kb/HT205032 x_refsource_CONFIRM
- http://www.securitytracker.com/id/1033100 vdb-entryx_refsource_SECTRACK
- https://kb.isc.org/article/AA-01307 x_refsource_CONFIRM
- http://www.securityfocus.com/bid/76092 vdb-entryx_refsource_BID
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.html vendor-advisoryx_refsource_SUSE
- http://marc.info/?l=bugtraq&m=144294073801304&w=2 vendor-advisoryx_refsource_HP
- https://www.exploit-db.com/exploits/37721/ exploitx_refsource_EXPLOIT-DB
- http://rhn.redhat.com/errata/RHSA-2015-1515.html vendor-advisoryx_refsource_REDHAT
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.html vendor-advisoryx_refsource_SUSE
- https://security.gentoo.org/glsa/201510-01 vendor-advisoryx_refsource_GENTOO
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.html vendor-advisoryx_refsource_SUSE
- http://marc.info/?l=bugtraq&m=144181171013996&w=2 vendor-advisoryx_refsource_HP
- http://marc.info/?l=bugtraq&m=144017354030745&w=2 vendor-advisoryx_refsource_HP
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480 x_refsource_CONFIRM
- http://www.debian.org/security/2015/dsa-3319 vendor-advisoryx_refsource_DEBIAN
- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.html vendor-advisoryx_refsource_FEDORA
- http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.html vendor-advisoryx_refsource_FEDORA
- https://www.exploit-db.com/exploits/37723/ exploitx_refsource_EXPLOIT-DB
- https://kb.isc.org/article/AA-01305 x_refsource_CONFIRM
- http://rhn.redhat.com/errata/RHSA-2016-0078.html vendor-advisoryx_refsource_REDHAT
- http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.html vendor-advisoryx_refsource_SUSE
- https://kb.isc.org/article/AA-01306 x_refsource_CONFIRM
- https://kc.mcafee.com/corporate/index?page=content&id=SB10126 x_refsource_CONFIRM
- https://kb.isc.org/article/AA-01272 x_refsource_CONFIRM
- http://marc.info/?l=bugtraq&m=144000632319155&w=2 vendor-advisoryx_refsource_HP
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5477 government-resource
اطلاعات
- تاریخ انتشار
- ۱۳۹۴/۰۵/۰۷
- آخرین بهروزرسانی
- ۱۴۰۵/۰۸/۱۳
- وضعیت
- PUBLISHED
- صادرکننده (CNA)
- mitre
- اولویت کلون
- بهزودی
فهرست KEV آژانس CISA
- تاریخ افزودهشدن
- ۱۴۰۵/۰۷/۱۶
- مهلت رفع
- ۱۴۰۵/۰۷/۱۹
- استفاده در باجافزار
- نامشخص
پیشبینی بهرهبرداری (EPSS)
۹۹٫۵۸٪
احتمال بهرهبرداری در ۳۰ روز
۹۹٫۹٪
صدک (نسبت به همهی CVEها)
ارزیابی SSVC (CISA)
- Automatable
- yes
- Exploitation
- active
- Technical Impact
- total
ضعفها (CWE)
- CWE-617Reachable Assertion