CVE-2015-5477High· 7.5▾ Abyssal⚠ Exploited in the wildPoC availablenamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 41.3 · likelihood 19.9 · exploitation 25
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 3 sources. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Federal remediation due Oct 11, 2026
91%
Last analysed / modified upstream
91% → 100%
Exploit-DB · 7 GitHub repos · Metasploit ×1 (last check)
Added to the CISA catalog on Oct 8, 2026. Federal remediation due Oct 11, 2026. View catalog ↗
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
junos < 12.1junos >= 13.1, < 13.2junos = 12.1junos = 12.1rjunos = 12.1x44junos = 12.1x45junos = 12.1x46junos = 12.1x47junos = 12.3junos = 12.3x48junos = 12.3x50junos = 13.2junos = 13.2x51junos = 14.1junos = 14.1x50junos = 14.1x51junos = 14.1x53junos = 14.2junos = 15.1junos = 15.1x49junos = 15.1x53fedora = 21fedora = 22enterprise_linux = 5.0enterprise_linux = 6.0enterprise_linux = 7.0enterprise_linux_aus = 6.4enterprise_linux_aus = 6.5enterprise_linux_aus = 6.6debian_linux = 7.0debian_linux = 8.0vm_server = 3.2solaris = 10solaris = 11.2hp-ux = 11.11hp-ux = 11.23hp-ux = 11.31ubuntu_linux = 12.04clustered_data_ontapos_x_server = 4.1.5dns = 9.2.3dns = 9.3openvms = 5.7vcx < 9.8.18linux_enterprise_debuginfo = 11evergreen = 11.4opensuse = 13.1opensuse = 13.2linux_enterprise_desktop = 11linux_enterprise_desktop = 12linux_enterprise_server = 10linux_enterprise_server = 11linux_enterprise_server = 12linux_enterprise_software_development_kit = 11linux_enterprise_software_development_kit = 12bind >= 9.1.0, < 9.9.7bind >= 9.10.0, < 9.10.2bind = 9.10.2Upgrade past the affected range:
junos 13.2vcx 9.8.18bind 9.10.2Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-109240Low· 3.1FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urb_isoch_transfer that allows malicious RDP servers to crash clients by sending unvalidated OutputBufferSize values
CVE-2026-101612Medium· 4.0mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101612)
CVE-2026-101618Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101618)
CVE-2026-101619Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101619)
CVE-2026-101621Medium· 4.9mysql: mysql: Denial of Service in InnoDB (CVE-2026-101621)
CVE-2026-101637Medium· 5.5mysql: mysql: Denial of Service via InnoDB component (CVE-2026-101637)