PT-2017-2244 · Gnu +3 · Glibc +3

🗓️ 09 Dec 2015 00:00:00Reported by Positive TechnologiesType

GNU C Library nscd before 2.20 has a netgroup buffer bug that can crash or enable code execution.

Reporter	Title	Published	Views	Family All 1952
0day.today	glibc and eglibc 2.5, 2.7, 2.13 - Buffer Overflow Vulnerability	1 Oct 201300:00	–	zdt
0day.today	glibc Off-by-One NUL Byte gconv_translit_find Exploit	27 Aug 201400:00	–	zdt
0day.today	Exim ESMTP GHOST Denial Of Service Exploit	29 Jan 201500:00	–	zdt
0day.today	Exim GHOST (glibc gethostbyname) Buffer Overflow Exploit	19 Mar 201500:00	–	zdt
0day.today	glibc - realpath() Privilege Escalation Exploit	13 Jun 201800:00	–	zdt
0day.today	Moxa Command Injection / Cross Site Scripting Vulnerabilities	1 Sep 202100:00	–	zdt
0day.today	Nexans FTTO GigaSwitch Outdated Components / Hardcoded Backdoor Vulnerability	21 Jun 202200:00	–	zdt
0day.today	Magento / Adobe Commerce Remote Code Execution Exploit	22 Oct 202400:00	–	zdt
Oracle linux	glibc security and bug fix update	24 Apr 201300:00	–	oraclelinux
Oracle linux	glibc security and bug fix update	8 Oct 201300:00	–	oraclelinux

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/magento_xxe_to_glibc_buf_overflow.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/smtp/exim_gethostbyname_bof.rb
github	www.github.com/ambionics/cnext-exploits
github	www.github.com/aaronfay/CVE-2015-0235-test
github	www.github.com/makelinux/CVE-2015-0235-workaround
github	www.github.com/arm13/ghost_exploit
github	www.github.com/rvizx/CVE-2024-2961
github	www.github.com/mholzinger/CVE-2015-0235_GHOST
github	www.github.com/mikesplain/CVE-2015-0235-cookbook
github	www.github.com/geekben/cve-collections/blob/master/cve20150235poc.c

16 May 2024 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.3 - 9.8

CVSS 210

CVSS 39.8

EPSS0.94859

SSVC