Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-0235
HistoryJan 27, 2015 - 12:00 a.m.

CVE-2015-0235

2015-01-2700:00:00
ubuntu.com
ubuntu.com
15

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.975 High

EPSS

Percentile

100.0%

Heap-based buffer overflow in the __nss_hostname_digits_dots function in
glibc 2.2, and other 2.x versions before 2.18, allows context-dependent
attackers to execute arbitrary code via vectors related to the (1)
gethostbyname or (2) gethostbyname2 function, aka β€œGHOST.”

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarcheglibc<Β 2.11.1-0ubuntu7.20UNKNOWN
ubuntu12.04noarcheglibc<Β 2.15-0ubuntu10.10UNKNOWN