GNU C Library Name Service Switch Privilege Bypass Vulnerability

🗓️ 20 Dec 2015 00:00:00Reported by China National Vulnerability DatabaseType

A local attacker can trigger denial of service via the GNU C Library get_contents vulnerability in nss_files/files-XXX.c.

Reporter	Title	Published	Views	Family All 49
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the GNU C Library (glibc) affect PowerKVM	18 Jun 201801:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Open Source GNU glibc affects IBM OS Images for Red Hat Linux Systems. (CVE-2015-5277)	15 Jun 201807:05	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities in OpenSSL, glibc, gcc, Net-SNMP, and OpenSSH affect IBM Security Proventia Network Enterprise Scanner	16 Jun 201821:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in GNU C Library affects IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch firmware (CVE-2015-5277)	31 Jan 201902:25	–	ibm
Amazon	Important: glibc	14 Dec 201500:00	–	amazon
Tenable Nessus	Amazon Linux AMI : glibc (ALAS-2015-617)	15 Dec 201500:00	–	nessus
Tenable Nessus	CentOS 7 : glibc (CESA-2015:2172)	2 Dec 201500:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.1.0 : glibc (EulerOS-SA-2019-1552)	14 May 201900:00	–	nessus
Tenable Nessus	GLSA-201702-11 : GNU C Library: Multiple vulnerabilities	21 Feb 201700:00	–	nessus
Tenable Nessus	MiracleLinux 7 : glibc-2.17-106.el7.1 (AXSA:2015-833:02)	16 Jan 202600:00	–	nessus

Vulners

Node

gnu glibcRange<2.2.0

Source	Link
rhn	www.rhn.redhat.com/errata/RHSA-2015-2172.html

23 Dec 2015 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 27.2

EPSS0.00588