2115 matches found
UBUNTU-CVE-2015-1472
The ADDW macro in stdio-common/vfscanf.c in the GNU C Library aka glibc or libc6 before 2.21 does not properly consider data-type size during memory allocation, which allows context-dependent attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a lo...
glibc: __nss_hostname_digits_dots() heap-based buffer overflow
A heap-based buffer overflow was found in glibc's nsshostnamedigitsdots function, which is used by the gethostbyname and gethostbyname2 glibc function calls. A remote attacker able to make an application call either of these functions could use this flaw to execute arbitrary code with the...
Security update for glibc (critical)
This update for glibc fixes the following security issue: CVE-2015-0235: A vulnerability was found and fixed in the GNU C Library, specifically in the function gethostbyname, that could lead to a local or remote buffer overflow. bsc913646...
SuSE 10 Security Update : glibc (ZYPP Patch Number 9035)
This update for glibc fixes the following security issue : - A vulnerability was found and fixed in the GNU C Library, specifically in the function gethostbyname, that can lead to a local or remote buffer overflow. bsc913646. CVE-2015-0235 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
DEBIAN-CVE-2015-0235
Heap-based buffer overflow in the nsshostnamedigitsdots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the 1 gethostbyname or 2 gethostbyname2 function, aka "GHOST."...
glibc (critical)
CVE-2015-0235: A vulnerability was found and fixed in the GNU C Library, specifically in the function gethostbyname, that could lead to a local or remote buffer overflow. bsc913646...
glibc: __nss_hostname_digits_dots() heap-based buffer overflow
A heap-based buffer overflow was found in glibc's nsshostnamedigitsdots function, which is used by the gethostbyname and gethostbyname2 glibc function calls. A remote attacker able to make an application call either of these functions could use this flaw to execute arbitrary code with the...
GNU C Library (glibc) __nss_hostname_digits_dots() function vulnerable to buffer overflow
Overview The nsshostnamedigitsdots function of the GNU C Library glibc allows a buffer overflow condition in which arbitrary code may be executed. This vulnerability has been assigned CVE-2015-0235, and is referred to in the media by the name "GHOST". Description According to Qualys, the...
Debian DSA-3142-1 : eglibc - security update
Several vulnerabilities have been fixed in eglibc, Debian's version of the GNU C library : - CVE-2015-0235 Qualys discovered that the gethostbyname and gethostbyname2 functions were subject to a buffer overflow if provided with a crafted IP address argument. This could be used by an attacker to...
DLA-139-1 eglibc - security update
Bulletin has no description...
GNU C Library gethostbyname Buffer Overflow (CVE-2015-0235)
A buffer overflow vulnerability, known as GHOST Vulnerability, exists in GNU C Library function. A remote attacker can exploit this vulnerability by providing crafted input to an application that uses this vulnerable function. Successful exploitation could result in code execution in the context ...
GNU glibc Remote Heap Buffer Overflow Vulnerability
GNU glibc is an implementation of the C library for the Linux operating system. GNU glibc suffers from a remote heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of an affected application...
Critical GHOST vulnerability affects most Linux Systems
A highly critical vulnerability has been unearthed in the GNU C Library glibc, a widely used component of most Linux distributions, that could allow attackers to execute malicious code on servers and remotely gain control of Linux machines. The vulnerability, dubbed "GHOST" and assigned...
glibc: __nss_hostname_digits_dots() heap-based buffer overflow
A heap-based buffer overflow was found in glibc's nsshostnamedigitsdots function, which is used by the gethostbyname and gethostbyname2 glibc function calls. A remote attacker able to make an application call either of these functions could use this flaw to execute arbitrary code with the...
USN-2485-1: GNU C Library vulnerability
It was discovered that a buffer overflow existed in the gethostbyname and gethostbyname2 functions in the GNU C Library. An attacker could use this issue to execute arbitrary code or cause an application crash, resulting in a denial of service...
glibc: __nss_hostname_digits_dots() heap-based buffer overflow
A heap-based buffer overflow was found in glibc's nsshostnamedigitsdots function, which is used by the gethostbyname and gethostbyname2 glibc function calls. A remote attacker able to make an application call either of these functions could use this flaw to execute arbitrary code with the...
PT-2015-1000
Name of the Vulnerable Software and Affected Versions glibc versions 2.2 through 2.17 Description The issue is related to a heap-based buffer overflow in the nss hostname digits dots function in glibc, which can be exploited via the gethostbyname or gethostbyname2 functions. This vulnerability ma...
Exim GHOST (glibc gethostbyname) Buffer Overflow
This module remotely exploits CVE-2015-0235, aka GHOST, a heap-based buffer overflow in the GNU C Library's gethostbyname functions on x86 and x8664 GNU/Linux systems that run the Exim mail server. Module Options msf use exploit/linux/smtp/exim/gethostbynamebof msf undefinedgethostbynamebof show...
Linux "Ghost" Remote Code Execution Vulnerability
The Linux GNU C Library glibc versions 2.2 and other 2.x versions before 2.18 are vulnerable to remote code execution via a vulnerability in the gethostbyname function. Exploitation of this vulnerability may allow a remote attacker to take control of an affected system. US-CERT recommends users a...