[SECURITY] [DLA 230-1] eglibc security update

2015-05-2718:03:22

lists.debian.org

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

High

0.105 Low

EPSS

Percentile

95.0%

JSON

Package : eglibc
Version : 2.11.3-4+deb6u6
CVE ID : CVE-2015-1781

Arjun Shankar of Red Hat discovered that gethostbyname_r and related
functions compute the size of an input buffer incorrectly if the passed-in
buffer is misaligned. This results in a buffer overflow.

For the oldoldstable distribution (squeeze), this problem has been
fixed in version 2.11.3-4+deb6u6.

Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: http://www.freexian.com/services/debian-lts.html
Learn to master Debian: http://debian-handbook.info/get/
Attachment:
signature.asc
Description: Digital signature

OSVersionArchitecturePackageVersionFilename
Debian8s390xlocales-all< 2.19-18+deb8u1locales-all_2.19-18+deb8u1_s390x.deb
Debian6amd64libnss-files-udeb< 2.11.3-4+deb6u6libnss-files-udeb_2.11.3-4+deb6u6_amd64.deb
Debian7s390xlibc6-udeb< 2.13-38+deb7u10libc6-udeb_2.13-38+deb7u10_s390x.deb
Debian7sparclibc6-dev-sparc64< 2.13-38+deb7u10libc6-dev-sparc64_2.13-38+deb7u10_sparc.deb
Debian7s390libnss-files-udeb< 2.13-38+deb7u10libnss-files-udeb_2.13-38+deb7u10_s390.deb
Debian7sparclibnss-files-udeb< 2.13-38+deb7u10libnss-files-udeb_2.13-38+deb7u10_sparc.deb
Debian8amd64nscd< 2.19-18+deb8u1nscd_2.19-18+deb8u1_amd64.deb
Debian6i386nscd< 2.11.3-4+deb6u6nscd_2.11.3-4+deb6u6_i386.deb
Debian6i386libc6-dev< 2.11.3-4+deb6u6libc6-dev_2.11.3-4+deb6u6_i386.deb
Debian7s390libc6-udeb< 2.13-38+deb7u10libc6-udeb_2.13-38+deb7u10_s390.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	s390x	locales-all	< 2.19-18+deb8u1	locales-all_2.19-18+deb8u1_s390x.deb
Debian	6	amd64	libnss-files-udeb	< 2.11.3-4+deb6u6	libnss-files-udeb_2.11.3-4+deb6u6_amd64.deb
Debian	7	s390x	libc6-udeb	< 2.13-38+deb7u10	libc6-udeb_2.13-38+deb7u10_s390x.deb
Debian	7	sparc	libc6-dev-sparc64	< 2.13-38+deb7u10	libc6-dev-sparc64_2.13-38+deb7u10_sparc.deb
Debian	7	s390	libnss-files-udeb	< 2.13-38+deb7u10	libnss-files-udeb_2.13-38+deb7u10_s390.deb
Debian	7	sparc	libnss-files-udeb	< 2.13-38+deb7u10	libnss-files-udeb_2.13-38+deb7u10_sparc.deb
Debian	8	amd64	nscd	< 2.19-18+deb8u1	nscd_2.19-18+deb8u1_amd64.deb
Debian	6	i386	nscd	< 2.11.3-4+deb6u6	nscd_2.11.3-4+deb6u6_i386.deb
Debian	6	i386	libc6-dev	< 2.11.3-4+deb6u6	libc6-dev_2.11.3-4+deb6u6_i386.deb
Debian	7	s390	libc6-udeb	< 2.13-38+deb7u10	libc6-udeb_2.13-38+deb7u10_s390.deb