CVE-2015-7547

このコードは現状のまま提供されています。お客様は、本コードによって生じるいかなるリスクからも、ご自身、ご自身の財産およびデータ、そして他者を保護する責任を負います。本 コードは、お客様のマシン上で予期しない望ましくない動作を引き起こす可能性があります。 本コードはお客様のシステム上の脆弱性を検出しない可能性があります。 このPOCはサーバーコードとクライアントコードの2つのコンポーネントで構成されていることに注意してください。 サーバーコードは脆弱性をトリガーするため、クライアントコードをクラッシュさせます。...

Rocky Linux 8 [CIQ] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc Multiple Vulnerabilities (crlsa-2023_5455)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20235455 advisory. glibc: buffer overflow in ld.so leading to privilege escalation CVE-2023-4911 glibc: Stack read overflow in getaddrinfo in no-aaaa mode CVE-2023-4527 glibc...

CentOS Linux 6 [TuxCare] Security Update: glibc / glibc-common / glibc-devel / glibc-headers / glibc-static / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1776605836)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1776605836 advisory. - In glibc 2.26 and earlier there is confusion in the usage of getcwd by realpath which can be used to write before the destination buff...

CVE-2015-7547-master

我们按原样提供此代码。您有责任保护自己、您的财产和数据以及他人免受此代码引起的任何风险。此代码可能会导致您的机器上出现意外和不良行为。此代码可能无法检测您系统上的漏洞。 请注意，此 POC 由两个组件组成：服务器代码和客户端代码。服务器代码会触发漏洞，因此会导致客户端代码崩溃。另请注意，必须将名称服务器设置为指向服务器代码，这样做可能会导致在测试进行期间其他调用 getaddrinfo 函数的程序崩溃。此 POC 代码按“原样”提供，不附带任何明示或暗示的保证，包括但不限于任何适销性、特定用途适用性和非侵权性保证。Google 对您正确安装和使用 POC 代码不承担任何责任。...

CVE-glibc

CVE-glibc CVE-2015-0235 glibc の Get Host by Name 問題 コピー＆ペーストして取得・確認する wget https://github.com/alanmeyer/CVE-glibc/raw/master/get-GHOST.sh chmod +x get-GHOST.sh ./get-GHOST.sh 参考文献: https://googleonlinesecurity.blogspot.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html...

CVE-2015-7547-proj-master

このコードは現状のまま提供されています。本コードによって生じるいかなるリスクからも、あなた自身、あなたの資産やデータ、そして他者を保護する責任はあなたにあります。本コードは、あなたのマシン上で予期せぬ望ましくない動作を引き起こす可能性があります。また、本コードがあなたのシステム上の脆弱性を検出しない可能性もあります。...

CVE-2015-7547

CVE-2015-7547 glibc getaddrinfo 基于栈的缓冲区溢出...

Astra Linux – Vulnerability in libuv1

libuv is a multi-platform support library that focuses on asynchronous I/O operations. The uvgetaddrinfo function in src/unix/getaddrinfo.c and its Windows counterpart src/win/getaddrinfo.c truncates hostnames to 256 characters before calling getaddrinfo. This behavior can be exploited to generat...

Astra Linux – Vulnerability in Firefox and Thunderbird

A suspected race condition during the call of getaddrinfo led to memory corruption and a potentially exploitable crash. Note: This issue only affected Linux operating systems. Other operating systems are unaffected. This vulnerability affects Thunderbird 78.13, Thunderbird 91, Firefox ESR 78.13,...

Astra Linux – Vulnerability in glibc

A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the nssgethostbyname2r and nssgetcanonnamer hooks without...

Astra Linux – Vulnerability in glibc

A flaw has been identified in glibc. In a rare situation, the gaihinet function may use memory that has already been freed, leading to an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with...

Astra Linux – Vulnerability in libuv1

Node.js versions prior to 16.4.1, 14.17.2, and 12.22.2 are vulnerable to an out-of-bounds read when the uvidnatoascii function is used to convert strings to ASCII. The pointer p is read and incremented without checking whether it lies beyond pe, where pe holds a pointer to the end of the buffer...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glibc (UTSA-2023-002881)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002881 advisory. A flaw was found in glibc. In an uncommon situation, the gaihinet function may use memory that has been freed, resulting in an application crash. This issue is only...

PT-2026-70100

Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch misp event and /misp search events endpoints. The URL validation routine checked whether a supplied hostname was itself an IP literal and rejected private, loopback, link-local, or reserved IPs. However, ordinary domai...

JLSEC-2026-764 In affected libpcap versions during the setup of a remote packet capture the internal function...

In affected libpcap versions during the setup of a remote packet capture the internal function sockinitaddress calls getaddrinfo and possibly freeaddrinfo, but does not clearly indicate to the caller function whether freeaddrinfo still remains to be called after the function returns. This makes i...

CVE-2026-33630

A flaw was found in c-ares. A use-after-free / double-free vulnerability exists in the query-completion handling path, where a query callback is invoked while the query is still linked in internal lookup structures. A remote attacker can exploit this via aresgetaddrinfo over TCP by sending crafte...

PT-2026-56309

Name of the Vulnerable Software and Affected Versions c-ares versions prior to 1.34.7 Description The software contains multiple issues. A use-after-free or double-free condition exists in query-completion handling, which can be remotely triggered via the ares getaddrinfo function over TCP...

CVE-2026-14607

A weakness has been identified in RT-Thread up to 5.0.2. This affects the function sysgetaddrinfo of the file components/lwp/lwpsyscall.c. Executing a manipulation of the argument aiaddr can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to...

CVE-2026-14607

A weakness has been identified in RT-Thread up to 5.0.2. This affects the function sysgetaddrinfo of the file components/lwp/lwpsyscall.c. Executing a manipulation of the argument aiaddr can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to...

CVE-2026-14607

CVE-2026-14607 affects RT-Thread up to 5.0.2, specifically the sys_getaddrinfo implementation in components/lwp/lwp_syscall.c. Manipulating the ai_addr argument can cause memory corruption; exploit public and local access required. A fix is being prepared in a pull request (RT-Thread/rt-thread#11...