F5 Networks BIG-IP : BIND vulnerability (K16909)
High Nessus Plugin ID 86011
SynopsisThe remote device is missing a vendor-supplied security patch.
DescriptionAn error in the handling of TKEY queries can be exploited by an attacker for use as a denial-of-service vector, as a constructed packet can use the defect to trigger a REQUIRE assertion failure, causing BIND to exit. (CVE-2015-5477)
SolutionUpgrade to one of the non-vulnerable versions listed in the F5 Solution K16909.