PT-2017-2244 · Gnu +3 · Glibc +3

🗓️ 09 Dec 2015 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 16 Views

GNU C Library nscd before 2.20 has a netgroup buffer bug that can crash or enable code execution.

Reporter	Title	Published	Views	Family All 1985
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a buffer overflow and underflow in GNU C Library (CVE-2021-3999)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: GNU C library (glibc) vulnerability affects WebSphere Transformation Extender with Launcher Hypervisor Edition [for RHEL] (CVE-2015-0235)	16 Jun 201819:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to glibc, Golang Go , Apache HTTP, IBM GSKit-Crypto and GnuTLS packages/liberaries .	22 May 202409:19	–	ibm
IBM Security Bulletins	Security Bulletin: GNU C library (glibc) vulnerability affects DS8000 (CVE-2015-0235)	24 May 202217:06	–	ibm
IBM Security Bulletins	Security Bulletin: PowerKVM is affected by glibc vulnerabilities (Multiple CVEs)	18 Jun 201801:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Software Delivery and Lifecycle Patterns for the glibc vulnerabilities (CVE-2014-5119)	17 Jun 201804:57	–	ibm
IBM Security Bulletins	Security Bulletin: GNU C library (glibc) vulnerability affects IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware (CVE-2015-0235)	31 Jan 201901:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	1 Mar 202417:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerability in GNU glibc (CVE-2018-11236)	17 Apr 201915:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a buffer overflow in GNU glibc (CVE-2021-3999)	1 Feb 202315:45	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/magento_xxe_to_glibc_buf_overflow.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/smtp/exim_gethostbyname_bof.rb
github	www.github.com/ambionics/cnext-exploits
github	www.github.com/aaronfay/CVE-2015-0235-test
github	www.github.com/makelinux/CVE-2015-0235-workaround
github	www.github.com/arm13/ghost_exploit
github	www.github.com/rvizx/CVE-2024-2961
github	www.github.com/mholzinger/CVE-2015-0235_GHOST
github	www.github.com/mikesplain/CVE-2015-0235-cookbook
github	www.github.com/geekben/cve-collections/blob/master/cve20150235poc.c

16 May 2024 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.3 - 9.8

CVSS 210

CVSS 39.8

EPSS0.94859

SSVC