Huawei noticed that Qualys had disclosed the buffer overflow in the GNU C Library (glibc) on January 27th, 2015, Applications call various gethostbyname function are affected and attackers can exploit this vulnerability to perform remote code execution. (Vulnerability ID: HWPSIRT-2015-01045)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2015-0235.

This vulnerability was first disclosed by Qualys.

Currently, official fixes and workarounds are available.

CPENameOperatorVersion
ar510eqAR510
ar510eqV200R005C30
ar3200eqAR3200
ar3200eqV200R005C30
bh620ltV2.26
bh620 v2ltV7.05
bh620 v2eqBH621
bh620 v2eqV2
bh620 v2eqBH622
bh620 v2eqV2

Name	Operator	Version
ar510	eq	AR510
ar510	eq	V200R005C30
ar3200	eq	AR3200
ar3200	eq	V200R005C30
bh620	lt	V2.26
bh620 v2	lt	V7.05
bh620 v2	eq	BH621
bh620 v2	eq	V2
bh620 v2	eq	BH622
bh620 v2	eq	V2

Rows per page:

1-10 of 1851

ibm 33

lenovo 2

threatpost 2

packetstorm 6

nessus 53

redhat 5

centos 2

slackware 1

metasploit 2

openvas 30

ics 2

checkpoint_advisories 1

thn 3

attackerkb 1

f5 2

altlinux 2

exploitpack 2

cert 1

debian 2

checkpoint_security 1

zdt 4

securityvulns 4

osv 2

prion 1

freebsd 2

amazon 3

debiancve 1

ubuntucve 1

suse 3

veracode 1

oraclelinux 5

fortinet 1

arista 1

cisco 1

vulnerlab 2

cisa 1

seebug 1

citrix 1

paloalto 1

ubuntu 1

cloudfoundry 1

cve 1

exploitdb 2

fedora 2

archlinux 2

gentoo 1

ibm

Security Bulletin: GNU C library (glibc) vulnerability affects IBM Security Access Manager for Mobile (CVE-2015-0235)

2018-06-16 21:22:14

Security Bulletin: GNU C library (glibc) vulnerability affects the Intel MPSS for use on the Intel Xeon Phi 3120A, Intel Xeon Phi 5110P, Intel Xeon Phi 7120A and Intel Xeon Phi 7120P PCI-Express add-in cards sold by IBM/Lenovo

2019-01-31 01:45:01

Security Bulletin: GNU C library (glibc) vulnerability affects IBM Hyper-Scale Manager Virtual Appliance (CVE-2015-0235)

2018-06-18 00:09:09

lenovo

GNU C Library (glibc) __nss_hostname_digits_dots() function vulnerable to buffer overflow ("GHOST")

2016-07-22 00:00:00

GNU C Library (glibc) __nss_hostname_digits_dots() function vulnerable to buffer overflow (

2016-07-22 00:00:00

threatpost

Ghost glibc Vulnerability Patching and Exploits

2015-01-28 13:28:29

GHOST glibc Linux Remote Code Execution Vulnerability

2015-01-27 12:55:29

packetstorm

Exim ESMTP GHOST Denial Of Service

2015-01-29 00:00:00

Exim GHOST (glibc gethostbyname) Buffer Overflow

2015-03-24 00:00:00

Qualys Security Advisory - glibc gethostbyname Buffer Overflow

2015-01-27 00:00:00

nessus

FreeBSD : glibc -- gethostbyname buffer overflow (0765de84-a6c1-11e4-a0c1-c485083ca99c) (GHOST)

2015-01-29 00:00:00

CentOS 5 : glibc (CESA-2015:0090) (GHOST)

2015-01-28 00:00:00

openSUSE Security Update : glibc (openSUSE-SU-2015:0184-1) (GHOST)

2015-02-03 00:00:00

redhat

(RHSA-2015:0092) Critical: glibc security update

2015-01-27 00:00:00

(RHSA-2015:0090) Critical: glibc security update

2015-01-27 00:00:00

(RHSA-2015:0099) Critical: glibc security update

2015-01-28 00:00:00

centos

glibc, nscd security update

2015-01-27 23:31:01

glibc, nscd security update

2015-01-27 22:59:55

slackware

[slackware-security] glibc

2015-01-28 20:35:21

metasploit

Exim GHOST (glibc gethostbyname) Buffer Overflow

2015-03-18 23:51:16

WordPress XMLRPC GHOST Vulnerability Scanner

2015-01-30 14:29:51

openvas

Debian: Security Advisory (DLA-139-1)

2023-03-08 00:00:00

Oracle: Security Advisory (ELSA-2015-0090)

2015-10-06 00:00:00

GNU glibc Remote Heap Buffer Overflow Vulnerability (WordPress)

2015-01-31 00:00:00

ics

Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability

2018-09-10 12:00:00

Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability (Update A)

2018-08-27 12:00:00

checkpoint_advisories

GNU C Library gethostbyname Buffer Overflow (CVE-2015-0235)

2015-01-28 00:00:00

thn

GHOST glibc Vulnerability Affects WordPress and PHP applications

2015-01-29 23:53:00

Critical GHOST vulnerability affects most Linux Systems

2015-01-27 21:17:00

Critical glibc Flaw Puts Linux Machines and Apps at Risk (Patch Immediately)

2016-02-16 21:27:00

attackerkb

Heap overflow in glibc 2.2 name resolution (CVE-2015-0235)

2015-01-28 00:00:00

K16057 : GHOST: glibc gethostbyname buffer overflow vulnerability CVE-2015-0235

2015-10-09 00:00:00

SOL16057 - GHOST: glibc gethostbyname buffer overflow vulnerability CVE-2015-0235

2015-01-27 00:00:00

altlinux

Security fix for the ALT Linux 6 package glibc version 6:2.11.3-alt8.M60P.2

2015-01-28 00:00:00

Security fix for the ALT Linux 5 package glibc version 6:2.11.2-alt1.M51.2

2015-01-28 00:00:00

exploitpack

Exim ESMTP 4.80 - glibc gethostbyname Denial of Service

2015-01-29 00:00:00

Exim - GHOST glibc gethostbyname Buffer Overflow (Metasploit)

2015-03-18 00:00:00

cert

GNU C Library (glibc) __nss_hostname_digits_dots() function vulnerable to buffer overflow

2015-01-28 00:00:00

debian

[SECURITY] [DLA 139-1] eglibc security update

2015-01-28 10:25:42

[SECURITY] [DSA 3142-1] eglibc security update

2015-01-27 15:39:01

checkpoint_security

Check Point Response to CVE-2015-0235 (glibc - GHOST)

2015-01-26 22:00:00

zdt

Exim GHOST (glibc gethostbyname) Buffer Overflow Exploit

2015-03-19 00:00:00

Exim ESMTP GHOST Denial Of Service Exploit

2015-01-29 00:00:00

Nexans FTTO GigaSwitch Outdated Components / Hardcoded Backdoor Vulnerability

2022-06-21 00:00:00

securityvulns

Qualys Security Advisory CVE-2015-0235 - GHOST: glibc gethostbyname buffer overflow

2015-02-02 00:00:00

GNU glibc gethostbyname functions buffer overflow

2015-02-02 00:00:00

ESA-2015-040: EMC Secure Remote Services Virtual Edition Security Update for Multiple Vulnerabilities

2015-03-16 00:00:00

osv

eglibc - security update

2015-01-28 00:00:00

eglibc - security update

2015-01-27 00:00:00

prion

Heap overflow

2015-01-28 19:59:00

freebsd

glibc -- gethostbyname buffer overflow

2015-01-27 00:00:00

php5 -- multiple vulnerabilities

2015-02-18 00:00:00

amazon

Critical: glibc

2015-01-27 11:41:00

Critical: php54

2015-03-13 10:00:00

Critical: php55

2015-03-23 08:29:00

debiancve

CVE-2015-0235

2015-01-28 19:59:00

ubuntucve

CVE-2015-0235

2015-01-27 00:00:00

suse

glibc (critical)

2015-01-28 19:04:53

Security update for glibc (critical)

2015-02-02 09:04:48

Security update for glibc (critical)

2015-01-28 03:04:56

veracode

Arbitrary Code Execution

2019-01-15 09:04:16

oraclelinux

glibc security update

2015-01-27 00:00:00

glibc security update

2015-01-29 00:00:00

glibc security update

2015-08-17 00:00:00

fortinet

CVE-2015-0235 "GHOST" vulnerability

2015-01-28 00:00:00

arista

Security Advisory 0009

2015-01-28 00:00:00

cisco

GNU glibc gethostbyname Function Buffer Overflow Vulnerability

2015-01-28 22:30:00

vulnerlab

Glibc Ghost Vulnerability (CVE-2015-0235) - How to Secure

2015-01-30 00:00:00

Glibc Ghost Vulnerability (CVE-2015-0235) - How to Secure

2015-01-30 00:00:00

cisa

Linux "Ghost" Remote Code Execution Vulnerability

2015-01-27 00:00:00

seebug

Linux glibc 缓冲区溢出 (幽灵(Ghost))

2015-07-02 00:00:00

citrix

CVE-2015-0235 - Citrix Security Advisory for glibc GHOST Vulnerability

2015-01-28 04:00:00

paloalto

GHOST: glibc vulnerability

2015-02-02 08:00:00

ubuntu

GNU C Library vulnerability

2015-01-27 00:00:00

cloudfoundry

CVE-2015-0235 - GHOST | Cloud Foundry

2015-01-28 00:00:00

cve

CVE-2015-0235

2015-01-28 19:59:00

exploitdb

Exim - 'GHOST' glibc gethostbyname Buffer Overflow (Metasploit)

2015-03-18 00:00:00

Exim ESMTP 4.80 - glibc gethostbyname Denial of Service

2015-01-29 00:00:00

fedora

[SECURITY] Fedora 21 Update: php-5.6.6-1.fc21

2015-02-23 23:28:40

[SECURITY] Fedora 20 Update: php-5.5.22-1.fc20

2015-03-04 10:24:35

archlinux

jasper: arbitrary code execution

2015-01-27 00:00:00

flashplugin: multiple issues

2015-01-23 00:00:00

gentoo

GNU C Library: Multiple vulnerabilities

2015-03-08 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.975 High

EPSS

Percentile

100.0%

JSON

Related for HUAWEI-SA-20150226-01-GLIBC