8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.975 High
EPSS
Percentile
99.9%
The glibc packages provide the standard C libraries (libc), POSIX thread
libraries (libpthread), standard math libraries (libm), and the Name
Server Caching Daemon (nscd) used by multiple programs on the system.
Without these libraries, the Linux system cannot function correctly.
A stack-based buffer overflow was found in the way the libresolv library
performed dual A/AAAA DNS queries. A remote attacker could create a
specially crafted DNS response which could cause libresolv to crash or,
potentially, execute code with the permissions of the user running the
library. Note: this issue is only exposed when libresolv is called from the
nss_dns NSS service module. (CVE-2015-7547)
This issue was discovered by the Google Security Team and Red Hat.
All glibc users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 6 | s390x | glibc-debuginfo | < 2.12-1.149.el6_6.11 | glibc-debuginfo-2.12-1.149.el6_6.11.s390x.rpm |
RedHat | 6 | s390 | glibc-static | < 2.12-1.149.el6_6.11 | glibc-static-2.12-1.149.el6_6.11.s390.rpm |
RedHat | 6 | i686 | glibc-static | < 2.12-1.107.el6_4.9 | glibc-static-2.12-1.107.el6_4.9.i686.rpm |
RedHat | 6 | x86_64 | glibc | < 2.12-1.107.el6_4.9 | glibc-2.12-1.107.el6_4.9.x86_64.rpm |
RedHat | 7 | s390x | glibc-devel | < 2.17-79.el7_1.4 | glibc-devel-2.17-79.el7_1.4.s390x.rpm |
RedHat | 7 | ppc64 | nscd | < 2.17-79.el7_1.4 | nscd-2.17-79.el7_1.4.ppc64.rpm |
RedHat | 6 | s390x | glibc | < 2.12-1.149.el6_6.11 | glibc-2.12-1.149.el6_6.11.s390x.rpm |
RedHat | 6 | x86_64 | glibc-common | < 2.12-1.132.el6_5.7 | glibc-common-2.12-1.132.el6_5.7.x86_64.rpm |
RedHat | 6 | x86_64 | glibc-static | < 2.12-1.132.el6_5.7 | glibc-static-2.12-1.132.el6_5.7.x86_64.rpm |
RedHat | 7 | i686 | glibc | < 2.17-79.el7_1.4 | glibc-2.17-79.el7_1.4.i686.rpm |
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.975 High
EPSS
Percentile
99.9%