CVE-2015-5477

ISC BIND's unpatched data processing error allowed remote denial of service via TKEY queries, exposing DIB networks to availability attacks.

ISC BIND's CVE-2015-5477 was actively exploited in the wild, causing denial of service through TKEY query processing errors. DIB organizations must ensure BIND is patched to prevent remote attackers from disrupting DNS services, which could sever connectivity to critical defense systems. This failure highlights the risk of relying on unpatched legacy infrastructure.

Shame score — A known, unpatched vulnerability was actively exploited in the wild, causing denial of service and demonstrating severe negligence in maintaining critical DNS infrastructure.