Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-20109
HistoryJun 25, 2023 - 5:15 p.m.

CVE-2015-20109

2023-06-2517:15:00
CWE-120
[email protected]
web.nvd.nist.gov
31
cve-2015-20109
gnu c library
glibc
denial of service
fnmatch
nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.3 Medium

AI Score

Confidence

High

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

12.1%

JSON

end_pattern (called from internal_fnmatch) in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to cause a denial of service (application crash), as demonstrated by use of the fnmatch library function with the **(!() pattern. NOTE: this is not the same as CVE-2015-8984; also, some Linux distributions have fixed CVE-2015-8984 but have not fixed this additional fnmatch issue.

CPENameOperatorVersion
gnu:glibcgnu glibclt2.22

Related

prion 2
cvelist 2
ubuntucve 2
debiancve 2
redhatcve 1
nessus 5
openvas 5
ubuntu 4
cve 1
f5 1
osv 1
oraclelinux 3
cloudfoundry 1
rosalinux 1
ibm 1
prion
prion
Design/Logic Flaw
2023-06-25 17:15:00
Out-of-bounds
2017-03-20 16:59:00
cvelist
cvelist
CVE-2015-20109
2023-06-25 00:00:00
CVE-2015-8984
2017-03-20 16:00:00
ubuntucve
ubuntucve
CVE-2015-20109
2023-06-25 00:00:00
CVE-2015-8984
2015-12-31 00:00:00
debiancve
debiancve
CVE-2015-20109
2023-06-25 17:15:00
CVE-2015-8984
2017-03-20 16:59:00
redhatcve
redhatcve
CVE-2015-20109
2023-06-26 07:47:00
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : GNU C Library vulnerabilities (USN-6762-1)
2024-05-02 00:00:00
F5 Networks BIG-IP : GNU C Library (glibc) vulnerability (K29241247)
2018-12-17 00:00:00
Ubuntu 12.04 LTS : eglibc regression (USN-3239-3)
2017-03-24 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6762-1)
2024-05-03 00:00:00
Debian: Security Advisory (DLA-316-1)
2023-03-08 00:00:00
Ubuntu: Security Advisory (USN-3239-3)
2017-03-25 00:00:00
ubuntu
ubuntu
GNU C Library vulnerabilities
2024-05-02 00:00:00
GNU C Library regression
2017-03-24 00:00:00
GNU C Library Regression
2017-03-21 00:00:00
cve
cve
CVE-2015-8984
2017-03-20 16:59:00
f5
f5
K29241247 : GNU C Library (glibc) vulnerability CVE-2015-8984
2017-04-26 00:00:00
osv
osv
eglibc, glibc vulnerabilities
2024-05-02 12:45:48
oraclelinux
oraclelinux
glibc security, bug fix, and enhancement update
2020-10-06 00:00:00
glibc security and bug fix update
2019-08-13 00:00:00
glibc security update
2019-08-19 00:00:00
cloudfoundry
cloudfoundry
USN-3239-2: GNU C Library Regression | Cloud Foundry
2017-03-31 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1844
2021-07-02 16:56:21
ibm
ibm
Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to multiple CVEs
2023-03-08 18:05:21

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.3 Medium

AI Score

Confidence

High

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

12.1%

JSON
Related for CVE-2015-20109
prion2cvelist2ubuntucve2debiancve2redhatcve1nessus5openvas5ubuntu4cve1f51osv1oraclelinux3cloudfoundry1rosalinux1ibm1