CVE-2015-5363

Name: CVE-2015-5363
Creator: NVD / NIST
Published: 2015-07-16T14:59:09.747+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.29%

Last modified Jun 17, 2026

CVE-2015-5363 is a vulnerability of currently unknown severity. The SRX Network Security Daemon (nsd) in Juniper SRX Series services gateways with Junos 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 allows remote DNS servers to cause a denial of service (crash) via a crafted DNS response.. EPSS estimates a 1.29% chance of exploitation in the next 30 days.

Description

The SRX Network Security Daemon (nsd) in Juniper SRX Series services gateways with Junos 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 allows remote DNS servers to cause a denial of service (crash) via a crafted DNS response.

Metrics

EPSS Probability

1.29%

66.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-19

Affected Software

Vendor	Product	Versions
Juniper	Junos	12.1x44
Juniper	Junos	12.1x46
Juniper	Junos	12.1x47
Juniper	Junos	12.3x48

References

Timeline

Published: Jul 16, 2015
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2015-5363?

How severe is CVE-2015-5363?

Severity scoring for CVE-2015-5363 is pending analysis. The EPSS model estimates a 1.29% probability of exploitation in the next 30 days.

How do I fix CVE-2015-5363?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2015-5363?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST