CVE-2015-7547 Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a deni...
HighCVSS 8.1
EPSS 92.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/glibc(Debian:12) | < 2.21-8 | 2.21-8 |
| debian/glibc(Debian:13) | < 2.21-8 | 2.21-8 |
| debian/glibc(Debian:14) | < 2.21-8 | 2.21-8 |
| debian linux | = 8.0 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.10 | No fix listed |
| HP Inc helion openstack | = 1.1.1 | No fix listed |
| HP Inc helion openstack | = 2.0.0 | No fix listed |
| HP Inc helion openstack | = 2.1.0 | No fix listed |
| HP Inc server migration pack | = 7.5 | No fix listed |
| sophos unified threat management software | = 9.319 | No fix listed |
| sophos unified threat management software | = 9.355 | No fix listed |
| SUSE linux enterprise debuginfo | = 11.0-sp2 | No fix listed |
| SUSE linux enterprise debuginfo | = 11.0-sp3 | No fix listed |
| SUSE linux enterprise debuginfo | = 11.0-sp4 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| SUSE linux enterprise desktop | = 11.0-sp3 | No fix listed |
| SUSE linux enterprise desktop | = 11.0-sp4 | No fix listed |
| SUSE linux enterprise desktop | = 12 | No fix listed |
| SUSE linux enterprise desktop | = 12-sp1 | No fix listed |
| SUSE linux enterprise server | = 11.0-sp2 | No fix listed |
| SUSE linux enterprise server | = 11.0-sp3 | No fix listed |
| SUSE linux enterprise server | = 11.0-sp4 | No fix listed |
| SUSE linux enterprise server | = 12-sp1 | No fix listed |
Show 45 more
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE linux enterprise software development kit | = 11.0-sp3 | No fix listed |
| SUSE linux enterprise software development kit | = 11.0-sp4 | No fix listed |
| SUSE linux enterprise software development kit | = 12 | No fix listed |
| SUSE linux enterprise software development kit | = 12-sp1 | No fix listed |
| suse linux enterprise server | = 12 | No fix listed |
| oracle exalogic infrastructure | = 1.0 | No fix listed |
| oracle exalogic infrastructure | = 2.0 | No fix listed |
| f5 big-ip access policy manager | = 12.0.0 | No fix listed |
| f5 big-ip advanced firewall manager | = 12.0.0 | No fix listed |
| f5 big-ip analytics | = 12.0.0 | No fix listed |
| f5 big-ip application acceleration manager | = 12.0.0 | No fix listed |
| f5 big-ip application security manager | = 12.0.0 | No fix listed |
| f5 big-ip domain name system | = 12.0.0 | No fix listed |
| f5 big-ip link controller | = 12.0.0 | No fix listed |
| f5 big-ip local traffic manager | = 12.0.0 | No fix listed |
| f5 big-ip policy enforcement manager | = 12.0.0 | No fix listed |
| oracle fujitsu m10 firmware | <= 2290 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux hpc node | = 7.0 | No fix listed |
| redhat enterprise linux hpc node eus | = 7.2 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.2 | No fix listed |
| redhat enterprise linux server eus | = 7.2 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| GNU glibc | = 2.9 | No fix listed |
| GNU glibc | = 2.10 | No fix listed |
| GNU glibc | = 2.10.1 | No fix listed |
| GNU glibc | = 2.11 | No fix listed |
| GNU glibc | = 2.11.1 | No fix listed |
| GNU glibc | = 2.11.2 | No fix listed |
| GNU glibc | = 2.11.3 | No fix listed |
| GNU glibc | = 2.12 | No fix listed |
| GNU glibc | = 2.12.1 | No fix listed |
| GNU glibc | = 2.12.2 | No fix listed |
| GNU glibc | = 2.13 | No fix listed |
| GNU glibc | = 2.14 | No fix listed |
| GNU glibc | = 2.14.1 | No fix listed |
| GNU glibc | = 2.15 | No fix listed |
| GNU glibc | = 2.16 | No fix listed |
| GNU glibc | = 2.17 | No fix listed |
| GNU glibc | = 2.18 | No fix listed |
| GNU glibc | = 2.19 | No fix listed |
| GNU glibc | = 2.20 | No fix listed |
| GNU glibc | = 2.21 | No fix listed |
| GNU glibc | = 2.22 | No fix listed |
References
- Debian Security Tracker CVE-2015-7547 vendor-advisory
- fortiguard.com
- FEDORA-2016-0480defc94 vendor-advisory
- FEDORA-2016-0f9e9a34ce vendor-advisory
- SUSE-SU-2016:0470 third-party-advisory vendor-advisory
- SUSE-SU-2016:0471 third-party-advisory vendor-advisory
- SUSE-SU-2016:0472 third-party-advisory vendor-advisory
- SUSE-SU-2016:0473 third-party-advisory vendor-advisory
- openSUSE-SU-2016:0510 third-party-advisory vendor-advisory
- openSUSE-SU-2016:0511 third-party-advisory vendor-advisory
- openSUSE-SU-2016:0512 third-party-advisory vendor-advisory
- HPSBGN03547 vendor-advisory
- HPSBGN03549 vendor-advisory
- HPSBGN03442 vendor-advisory
- HPSBGN03551 vendor-advisory
- HPSBGN03582 vendor-advisory
- packetstormsecurity.com
- packetstormsecurity.com
- packetstormsecurity.com
- packetstormsecurity.com
- RHSA-2016:0175 vendor-advisory
- RHSA-2016:0176 third-party-advisory vendor-advisory
- RHSA-2016:0225 vendor-advisory
- RHSA-2016:0277 vendor-advisory
- 20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X mailing-list
- 20210901 SEC Consult SA-20210901-0 :: Multiple vulnerabilities in MOXA devices mailing-list
- 20220617 SEC Consult SA-20220615-0 :: Hardcoded Backdoor User and Outdated Software Components in Nexans FTTO GigaSwitch series mailing-list
- support.citrix.com
- USN-2900-1 third-party-advisory vendor-advisory
- DSA-3480 vendor-advisory
- DSA-3481 third-party-advisory vendor-advisory
- www.fortiguard.com
- www.huawei.com
- www.oracle.com patch third-party-advisory
- www.oracle.com
- www.oracle.com
- 83265 vdb-entry
- 1035020 vdb-entry
- www.vmware.com
- access.redhat.com third-party-advisory
- blogs.sophos.com third-party-advisory
- blogs.sophos.com third-party-advisory
- bto.bluecoat.com third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- googleonlinesecurity.blogspot.com
- h20566.www2.hpe.com third-party-advisory
- h20566.www2.hpe.com third-party-advisory
- h20566.www2.hpe.com
- h20566.www2.hpe.com
- h20566.www2.hpe.com
- h20566.www2.hpe.com third-party-advisory
- h20566.www2.hpe.com third-party-advisory
- h20566.www2.hpe.com third-party-advisory
- h20566.www2.hpe.com third-party-advisory
- h20566.www2.hpe.com third-party-advisory
- h20566.www2.hpe.com
- h20566.www2.hpe.com
- h20566.www2.hpe.com
- h20566.www2.hpe.com
- h20566.www2.hpe.com
- help.ecostruxureit.com
- ics-cert.us-cert.gov
- kb.pulsesecure.net third-party-advisory
- kc.mcafee.com third-party-advisory
- 20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X mailing-list
- GLSA-201602-02 third-party-advisory vendor-advisory
- security.netapp.com
- sourceware.org issue-tracking
- [libc-alpha] 20160216 [PATCH] CVE-2015-7547 --- glibc getaddrinfo() stack-based buffer overflow mailing-list vendor-advisory
- support.f5.com third-party-advisory
- support.lenovo.com
- www.arista.com
- 39454 exploit
- 40339 exploit
- VU#457759 third-party-advisory
- www.tenable.com