CVE-2015-5477

Exploitation

Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalog on 2026-10-08. Federal remediation due 2026-10-11.

SSVC decision

• ExploitationactiveCISA reports credible evidence of active exploitation.
• AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
• Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

99.58% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 99.9% of scored records. A rank, not a probability.

NVD base score

7.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-10-09.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2015-07-29 14:00Z11 YR AGO

Last updated

2026-10-09 03:55Z20 DAYS AGO

Reserved

2015-07-10

Assigning CNA

mitre

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

• CWE-617Reachable AssertionBase
• CWE-19

Data version

5.2

Document digest

1e2f2d5db1d8304a48deb203feae2777bc14b12422c3f9089b14e3a26406d9dd

• packetstormsecurity.comhttp://packetstormsecurity.com/files/132926/BIND-TKEY-Query-Denial-Of-Service.htmlx_refsource_MISC
• www.oracle.comhttp://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlx_refsource_CONFIRM
• lists.opensuse.orgopenSUSE-SU-2015:1326http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00050.htmlvendor-advisoryx_refsource_SUSE
• h20564.www2.hpe.comhttps://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04789415x_refsource_CONFIRM
• kb.juniper.nethttps://kb.juniper.net/JSA10783x_refsource_CONFIRM
• rhn.redhat.comRHSA-2015:1513http://rhn.redhat.com/errata/RHSA-2015-1513.htmlvendor-advisoryx_refsource_REDHAT
• lists.opensuse.orgSUSE-SU-2015:1305http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00044.htmlvendor-advisoryx_refsource_SUSE
• security.netapp.comhttps://security.netapp.com/advisory/ntap-20160114-0001/x_refsource_CONFIRM
• kb.isc.orghttps://kb.isc.org/article/AA-01438x_refsource_CONFIRM
• lists.fedoraproject.orgFEDORA-2015-12316http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163015.htmlvendor-advisoryx_refsource_FEDORA
• marc.infoHPSBUX03410http://marc.info/?l=bugtraq&m=144017354030745&w=2vendor-advisoryx_refsource_HP
• marc.infoSSRT102248http://marc.info/?l=bugtraq&m=144294073801304&w=2vendor-advisoryx_refsource_HP
• rhn.redhat.comRHSA-2016:0079http://rhn.redhat.com/errata/RHSA-2016-0079.htmlvendor-advisoryx_refsource_REDHAT
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05095918x_refsource_CONFIRM
• www.oracle.comhttp://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.htmlx_refsource_CONFIRM
• kb.juniper.nethttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10718x_refsource_CONFIRM
• rhn.redhat.comRHSA-2015:1514http://rhn.redhat.com/errata/RHSA-2015-1514.htmlvendor-advisoryx_refsource_REDHAT
• www.ubuntu.comUSN-2693-1http://www.ubuntu.com/usn/USN-2693-1vendor-advisoryx_refsource_UBUNTU
• support.apple.comhttps://support.apple.com/kb/HT205032x_refsource_CONFIRM
• www.securitytracker.com1033100http://www.securitytracker.com/id/1033100vdb-entryx_refsource_SECTRACK
• kb.isc.orghttps://kb.isc.org/article/AA-01307x_refsource_CONFIRM
• www.securityfocus.com76092http://www.securityfocus.com/bid/76092vdb-entryx_refsource_BID
• lists.opensuse.orgSUSE-SU-2015:1316http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00045.htmlvendor-advisoryx_refsource_SUSE
• lists.opensuse.orgopenSUSE-SU-2015:1335http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00001.htmlvendor-advisoryx_refsource_SUSE
• www.exploit-db.com37721https://www.exploit-db.com/exploits/37721/exploitx_refsource_EXPLOIT-DB
• rhn.redhat.comRHSA-2015:1515http://rhn.redhat.com/errata/RHSA-2015-1515.htmlvendor-advisoryx_refsource_REDHAT
• lists.opensuse.orgSUSE-SU-2015:1322http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00048.htmlvendor-advisoryx_refsource_SUSE
• security.gentoo.orgGLSA-201510-01https://security.gentoo.org/glsa/201510-01vendor-advisoryx_refsource_GENTOO
• lists.opensuse.orgSUSE-SU-2015:1304http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00043.htmlvendor-advisoryx_refsource_SUSE
• marc.infoHPSBOV03506http://marc.info/?l=bugtraq&m=144181171013996&w=2vendor-advisoryx_refsource_HP
• h20564.www2.hpe.comhttps://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480x_refsource_CONFIRM
• www.debian.orgDSA-3319http://www.debian.org/security/2015/dsa-3319vendor-advisoryx_refsource_DEBIAN
• lists.fedoraproject.orgFEDORA-2015-12357http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163007.htmlvendor-advisoryx_refsource_FEDORA
• marc.infoHPSBUX03400http://marc.info/?l=bugtraq&m=144000632319155&w=2vendor-advisoryx_refsource_HP
• lists.fedoraproject.orgFEDORA-2015-12335http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163006.htmlvendor-advisoryx_refsource_FEDORA
• www.exploit-db.com37723https://www.exploit-db.com/exploits/37723/exploitx_refsource_EXPLOIT-DB
• kb.isc.orghttps://kb.isc.org/article/AA-01305x_refsource_CONFIRM
• rhn.redhat.comRHSA-2016:0078http://rhn.redhat.com/errata/RHSA-2016-0078.htmlvendor-advisoryx_refsource_REDHAT
• lists.opensuse.orgSUSE-SU-2016:0227http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00033.htmlvendor-advisoryx_refsource_SUSE
• kb.isc.orghttps://kb.isc.org/article/AA-01306x_refsource_CONFIRM
• kc.mcafee.comhttps://kc.mcafee.com/corporate/index?page=content&id=SB10126x_refsource_CONFIRM
• kb.isc.orghttps://kb.isc.org/article/AA-01272x_refsource_CONFIRM
• www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5477government-resource