> Source: [sk107632](https://support.checkpoint.com/results/sk/sk107632)

# sk107632 - Check Point response to CVE-2015-5477 (ISC BIND Invalid TKEY Query Denial Of Service)

| Property | Value |
|----------|-------|
| Solution ID | sk107632 |
| Date Created | 2015-09-13 |
| Last Modified | 2015-09-13 |
| Technical Level | General |

## Symptoms

- An error in the handling of TKEY queries was reported in [ISC Security Advisory AA-01272](https://kb.isc.org/article/AA-01272/0/CVE-2015-5477%3A-An-error-in-handling-TKEY-queries-can-cause-named-to-exit-with-a-REQUIRE-assertion-failure.html), which can be exploited by an attacker for use as a denial-of-service vector, as a constructed packet can use the defect to trigger a REQUIRE assertion failure, causing BIND to exit [CVE-2015-5477](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5477).

## Solution

Check Point software is *not* vulnerable because it does not use BIND.

Check Point offers IPS protection for this issue - "*ISC BIND Invalid TKEY Query Denial Of Service (CVE-2015-5477)*".

Refer to:

* <http://blog.checkpoint.com/2015/08/05/threat-alert-bind-dns-server-tkey-vulnerability/>
* <http://www.checkpoint.com/defense/advisories/public/2015/cpai-2015-0908.html>

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content