compromised.live Free. No login.
Feed / CVE-2015-5477Also as JSON
WATCHExploited vulnerability ISC BIND

ISC BIND Data Processing Errors Vulnerability

What's happening and what to do

Remote attackers can crash the BIND DNS server by sending specially crafted TKEY queries, causing denial of service, and this flaw is being actively exploited. ISC BIND DNS server software. Apply the vendor's update now and check for signs of compromise, such as unexpected DNS server crashes or restarts.

AI summary of the sources on this page. Regenerated when a source changes.

Signals over time

  1. 2026-10-08Added to CISA's Known Exploited Vulnerabilities catalog.
  2. 2026-10-11Federal patch deadline for US agencies.
  3. 2026-11-03 21:55First seen here.

Source text

ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.