Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing “dual A/AAAA DNS queries” and the libnss_dns.so.2 NSS module.

OSVersionArchitecturePackageVersionFilename
Debian12allglibc< 2.21-8glibc_2.21-8_all.deb
Debian11allglibc< 2.21-8glibc_2.21-8_all.deb
Debian10allglibc< 2.21-8glibc_2.21-8_all.deb
Debian999allglibc< 2.21-8glibc_2.21-8_all.deb
Debian13allglibc< 2.21-8glibc_2.21-8_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	glibc	< 2.21-8	glibc_2.21-8_all.deb
Debian	11	all	glibc	< 2.21-8	glibc_2.21-8_all.deb
Debian	10	all	glibc	< 2.21-8	glibc_2.21-8_all.deb
Debian	999	all	glibc	< 2.21-8	glibc_2.21-8_all.deb
Debian	13	all	glibc	< 2.21-8	glibc_2.21-8_all.deb

checkpoint_advisories 1

fortinet 1

oraclelinux 6

huawei 2

altlinux 2

redhat 4

exploitpack 2

nessus 35

openvas 36

fedora 2

threatpost 2

symantec 1

ibm 32

slackware 1

cert 1

citrix 1

cisco 1

chrome 1

suse 11

vmware 2

seebug 1

f5 2

ubuntu 1

centos 2

paloalto 1

cve 1

ubuntucve 1

myhack58 3

zdt 4

freebsd 1

arista 1

prion 1

packetstorm 4

intel 1

veracode 1

ics 2

amazon 1

debian 5

osv 3

thn 1

archlinux 2

mageia 1

gentoo 1

kitploit 1

oracle 2

checkpoint_advisories

DNS Client Resolver glibc Buffer Overflow (CVE-2015-7547)

2016-02-18 00:00:00

fortinet

Glibc getaddrinfo() stack-overflow

2016-02-25 00:00:00

oraclelinux

glibc security update

2016-02-16 00:00:00

glibc security and bug fix update

2016-02-16 00:00:00

glibc security and bug fix update

2016-02-16 00:00:00

huawei

Security Advisory - GNU Glibc Buffer Overflow Security Vulnerability

2016-03-04 00:00:00

Security Advisory - GNU Glibc Buffer Overflow Security Vulnerability

2016-03-04 00:00:00

altlinux

Security fix for the ALT Linux 6 package glibc version 6:2.11.3-alt8.M60P.5

2016-02-16 00:00:00

Security fix for the ALT Linux 7 package glibc version 6:2.17-alt8.M70P.1

2016-02-16 00:00:00

redhat

(RHSA-2016:0225) Critical: glibc security update

2016-02-16 00:00:00

(RHSA-2016:0175) Critical: glibc security and bug fix update

2016-02-16 00:00:00

(RHSA-2016:0277) Critical: rhev-hypervisor security update

2016-02-19 00:00:00

exploitpack

glibc - getaddrinfo Remote Stack Buffer Overflow

2016-09-06 00:00:00

glibc - getaddrinfo Stack Buffer Overflow (PoC)

2016-02-16 00:00:00

nessus

CentOS 6 : glibc (CESA-2016:0175)

2016-02-17 00:00:00

F5 Networks BIG-IP : glibc vulnerability (K47098834)

2016-02-17 00:00:00

Arista Networks EOS libresolv Overflow RCE (SA0017)

2018-02-28 00:00:00

openvas

Slackware: Security Advisory (SSA:2016-054-02)

2022-04-21 00:00:00

RedHat Update for glibc RHSA-2016:0175-01

2016-02-17 00:00:00

openSUSE: Security Advisory for glibc (openSUSE-SU-2016:0512-1)

2016-03-01 00:00:00

fedora

[SECURITY] Fedora 23 Update: glibc-2.22-9.fc23

2016-02-17 14:21:52

[SECURITY] Fedora 22 Update: glibc-2.21-11.fc22

2016-02-17 12:51:37

threatpost

Magnitude of glibc Vulnerability Coming to Light

2016-02-17 16:01:47

glibc Linux remote code execution vulnerability

2016-02-16 12:00:37

symantec

SA114 : GNU C Library (glibc) Remote Code Execution February 2016

2016-02-19 08:00:00

ibm

Security Bulletin: GNU C library (glibc) vulnerability affects IBM Security Network Active Bypass (CVE-2015-7547)

2018-06-16 21:41:40

Security Bulletin: GNU C library (glibc) vulnerability affects IBM Security Access Manager for Web (CVE-2015-7547)

2018-06-16 21:39:55

Security Bulletin: GNU C library (glibc) vulnerability affects IBM MobileFirst Quality Assurance (CVE-2015-7547)

2018-06-17 22:32:59

slackware

[slackware-security] glibc

2016-02-23 19:50:50

cert

glibc vulnerable to stack buffer overflow in DNS resolver

2016-02-17 00:00:00

citrix

CVE-2015-7547 - Citrix Security Advisory for glibc Vulnerability

2016-02-19 04:00:00

cisco

Vulnerability in GNU glibc Affecting Cisco Products: February 2016

2016-02-18 20:22:00

chrome

Stable Channel Update for Chrome OS

2016-02-18 00:00:00

suse

Security update for glibc (critical)

2016-02-19 12:11:34

Security update for glibc (critical)

2016-02-19 12:11:39

Security update for glibc (important)

2016-02-19 00:11:49

vmware

VMware product updates address a critical glibc security vulnerability

2016-02-22 00:00:00

VMware product updates address a critical glibc security vulnerability.

2016-02-22 00:00:00

seebug

glibc getaddrinfo 栈缓冲区溢出漏洞(CVE-2015-7547)

2016-02-17 00:00:00

SOL47098834 - glibc vulnerability CVE-2015-7547

2016-02-16 00:00:00

K47098834 : glibc vulnerability CVE-2015-7547

2016-02-17 00:00:00

ubuntu

GNU C Library vulnerability

2016-02-16 00:00:00

centos

glibc, nscd security update

2016-02-17 00:39:19

glibc, nscd security update

2016-02-17 01:37:20

paloalto

Glibc DNS Resolver Vulnerability

2016-08-15 19:00:00

cve

CVE-2015-7547

2016-02-18 21:59:00

ubuntucve

CVE-2015-7547

2016-02-16 00:00:00

myhack58

How to by CVE-2015-7547(GLIBC getaddrinfo)vulnerability to bypass ASLR-exploits warning-the black bar safety net

2017-03-05 00:00:00

How to by CVE-2015-7547(GLIBC getaddrinfo)vulnerability to bypass ASLR-exploits warning-the black bar safety net

2017-02-20 00:00:00

Linux, the underlying function library“glibc”reproduction is a major security vulnerability, a plurality of releases affected-vulnerability warning-the black bar safety net

2016-02-18 00:00:00

zdt

glibc - getaddrinfo Stack Based Buffer Overflow (1)

2016-02-16 00:00:00

glibc - getaddrinfo Stack Based Buffer Overflow (2)

2016-09-06 00:00:00

Nexans FTTO GigaSwitch Outdated Components / Hardcoded Backdoor Vulnerability

2022-06-21 00:00:00

freebsd

glibc -- getaddrinfo stack-based buffer overflow

2016-02-16 00:00:00

arista

Security Advisory 0017

2017-10-31 00:00:00

prion

Stack overflow

2016-02-18 21:59:00

packetstorm

glibc getaddrinfo Stack Buffer Overflow

2016-09-06 00:00:00

Nexans FTTO GigaSwitch Outdated Components / Hardcoded Backdoor

2022-06-20 00:00:00

Moxa Command Injection / Cross Site Scripting / Vulnerable Software

2021-09-01 00:00:00

intel

Multiple Intel Software Products and Services impacted by CVE-2015-7547

2016-05-26 00:00:00

veracode

Denial Of Service (DoS) Through C Dependency

2017-06-21 05:34:25

ics

Siemens Industrial Products glibc Library Vulnerability (Update C)

2016-04-12 00:00:00

Siemens Industrial Products glibc Library Vulnerability (Update C)

2018-08-23 12:00:00

amazon

Critical: glibc

2016-02-16 06:00:00

debian

[SECURITY] [DLA 416-1] eglibc security update

2016-02-16 16:49:24

[SECURITY] [DSA 3481-1] glibc security update

2016-02-16 14:18:27

[SECURITY] [DSA 3481-1] glibc security update

2016-02-16 14:18:27

osv

eglibc - security update

2016-02-16 00:00:00

glibc - security update

2016-02-16 00:00:00

eglibc - security update

2016-02-16 00:00:00

thn

Critical glibc Flaw Puts Linux Machines and Apps at Risk (Patch Immediately)

2016-02-16 21:27:00

archlinux

lib32-glibc: multiple issues

2016-02-17 00:00:00

glibc: multiple issues

2016-02-17 00:00:00

mageia

Updated glibc packages fix security vulnerabilities

2016-02-19 11:40:43

gentoo

GNU C Library: Multiple vulnerabilities

2016-02-17 00:00:00

kitploit

Kernelpop - Kernel Privilege Escalation Enumeration And Exploitation Framework

2017-11-04 13:30:00

oracle

Oracle Critical Patch Update Advisory - April 2016

2016-04-19 00:00:00

Oracle Critical Patch Update - January 2018

2018-01-16 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.974 High

EPSS

Percentile

99.9%

JSON

Related for DEBIANCVE:CVE-2015-7547