Lucene search
K

30 matches found

OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.37 views

Debian: Security Advisory (DLA-139-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.3AI score0.94859EPSS
Exploits29References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:23 a.m.8 views

SUSE CVE-2015-0235

Heap-based buffer overflow in the nsshostnamedigitsdots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the 1 gethostbyname or 2 gethostbyname2 function, aka "GHOST."...

10CVSS8.2AI score0.94859EPSS
Exploits29References15
Veracode
Veracode
added 2019/01/15 9:4 a.m.45 views

Arbitrary Code Execution

glibc is vulnerable to arbitrary code execution attacks. The vulnerability exists as a heap-based buffer overflow in the nsshostnamedigitsdots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the 1...

10CVSS7.8AI score0.94859EPSS
Exploits29References92Affected Software1
Lenovo
Lenovo
added 2016/07/22 12:0 a.m.253 views

GNU C Library (glibc) __nss_hostname_digits_dots() function vulnerable to buffer overflow ("GHOST")

Lenovo Security Advisory: LEN-2015-007 Potential Impact: Execution of Arbitrary Code Severity: High Summary: A vulnerability has been found in the GNU C Library glibc nsshostnamedigitsdots function that allows both local and remote users to cause a buffer overflow in network function calls...

10CVSS8.2AI score0.94859EPSS
Exploits29
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.4 views

The vulnerability of microprogrammed software in Cisco Nexus 1000V virtual switches allows a remote attacker to execute arbitrary code.

Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...

10CVSS7.9AI score0.94859EPSS
Exploits29References4
ICS
ICS
added 2015/12/06 7:0 a.m.114 views

Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-064-01 Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability that was published March 5, 2015, on the NCCIC/ICS-CERT web site. The “GHOST”Further information about the GHOST vulnerability:...

10CVSS8AI score0.94859EPSS
Exploits29References10
OpenVAS
OpenVAS
added 2015/09/08 12:0 a.m.51 views

Amazon Linux: Security Advisory (ALAS-2015-494)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.3AI score0.94859EPSS
Exploits38References2
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:0 a.m.2 views

The vulnerability of the microprogramming software of the Cisco Wireless LAN Controller 2100 allows a remote attacker to execute arbitrary code.

Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...

10CVSS7.9AI score0.94859EPSS
Exploits29References4
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:0 a.m.3 views

The vulnerability of the microprogramming software of the Cisco Wireless LAN Controller 2500 allows a remote attacker to execute arbitrary code.

Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...

10CVSS7.9AI score0.94859EPSS
Exploits29References4
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:0 a.m.2 views

The vulnerability of the microprogramming software of the Cisco Wireless LAN Controller 2000 allows a remote attacker to execute arbitrary code.

Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...

10CVSS7.9AI score0.94859EPSS
Exploits29References4
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:0 a.m.4 views

The vulnerability of the microprogramming software of the Cisco Wireless LAN Controller 5500 allows a malicious attacker to execute arbitrary code.

Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...

10CVSS7.9AI score0.94859EPSS
Exploits29References4
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.2 views

The vulnerability of Cisco ASR router’s microprogramming software allows a remote attacker to execute arbitrary code.

Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...

10CVSS7.9AI score0.94859EPSS
Exploits29References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.3 views

The vulnerability of the microprogramming software of Cisco Nexus 7000 allows a remote attacker to execute arbitrary code.

Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...

10CVSS7.9AI score0.94859EPSS
Exploits29References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.2 views

The vulnerability of the microprogramming software of the Cisco Unified Communications Manager allows a remote attacker to execute arbitrary code.

Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...

10CVSS7.9AI score0.94859EPSS
Exploits29References4
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.2 views

The vulnerability of the microprogramming software of Cisco Nexus 5000 allows a intruder to execute arbitrary code.

Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...

10CVSS7.9AI score0.94859EPSS
Exploits29References4
Tenable Nessus
Tenable Nessus
added 2015/01/29 12:0 a.m.70 views

FreeBSD : glibc -- gethostbyname buffer overflow (0765de84-a6c1-11e4-a0c1-c485083ca99c) (GHOST)

Robert Kratky reports : GHOST is a 'buffer overflow' bug affecting the gethostbyname and gethostbyname2 function calls in the glibc library. This vulnerability allows a remote attacker that is able to make an application call to either of these functions to execute arbitrary code with the...

10CVSS7.9AI score0.94859EPSS
Exploits29References4
ATTACKERKB
ATTACKERKB
added 2015/01/28 7:59 p.m.78 views

Heap overflow in glibc 2.2 name resolution (CVE-2015-0235)

Heap-based buffer overflow in the nsshostnamedigitsdots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the 1 gethostbyname or 2 gethostbyname2 function, aka "GHOST."...

10CVSS7.5AI score0.94859EPSS
Exploits29References100
Prion
Prion
added 2015/01/28 7:59 p.m.47 views

Heap overflow

Heap-based buffer overflow in the nsshostnamedigitsdots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the 1 gethostbyname or 2 gethostbyname2 function, aka "GHOST."...

10CVSS8.6AI score0.94859EPSS
Exploits29References90Affected Software18
OSV
OSV
added 2015/01/28 7:59 p.m.6 views

DEBIAN-CVE-2015-0235

Heap-based buffer overflow in the nsshostnamedigitsdots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the 1 gethostbyname or 2 gethostbyname2 function, aka "GHOST."...

10CVSS8.6AI score0.94859EPSS
Exploits29References1
CVE
CVE
added 2015/01/28 7:0 p.m.589 views

CVE-2015-0235

CVE-2015-0235 (GHOST) is a heap-based buffer overflow in glibc’s __nss_hostname_digits_dots() used by gethostbyname/gethostbyname2. Affected glibc versions include 2.2 up to 2.17; patched in glibc-2.18 and later. Exploitation could allow remote or context-dependent arbitrary code execution depend...

10CVSS7.7AI score0.94859EPSS
In wildExploits29References90Affected Software1
Rows per page
Query Builder