HighCVECVE-2015-5477
[CVE-2015-5477] ISC BIND — ISC BIND Data Processing Errors Vulnerability
CISA KEV·Source published ·1 min read
What happened?
ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable.
Key details
- The vulnerability allows remote code execution or denial of service in Citrix NetScaler ADC and Gateway.
- The vulnerability is not known to be used in ransomware campaigns.
- Provided IOCs can be run in the NetScaler console to spot exploitation.
- Forensic triage must follow BOD 26‑04 and Citrix guidance.
Affected
- Citrix NetScaler ADC and NetScaler Gateway are affected.
Fixes and mitigations
- Apply vendor mitigations per instructions.
What to look for
- Use the provided IOCs to detect exploitation.
Summarised by SecOraLens from CISA KEV. Always read the original source before acting. How SecOraLens verifies advisories.