CVEvulnerability

CVE-2015-7547

8.1 HIGH Published 2016-02-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-02-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.1 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.

Affected configurations

• debian debian linux 8.0 • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 15.10 • hp helion openstack 1.1.1 • hp helion openstack 2.0.0 • hp helion openstack 2.1.0 • hp server migration pack 7.5 • sophos unified threat management software 9.319 • sophos unified threat management software 9.355 • suse linux enterprise debuginfo 11.0 • opensuse opensuse 13.2 • suse linux enterprise desktop 11.0 • suse linux enterprise desktop 12 • suse linux enterprise server 11.0 • suse linux enterprise server 12 • suse linux enterprise software development kit 11.0 • suse linux enterprise software development kit 12 • suse suse linux enterprise server 12 • oracle exalogic infrastructure 1.0 • oracle exalogic infrastructure 2.0 • f5 big-ip access policy manager 12.0.0 • f5 big-ip advanced firewall manager 12.0.0 • f5 big-ip analytics 12.0.0 • f5 big-ip application acceleration manager 12.0.0 • f5 big-ip application security manager 12.0.0 • f5 big-ip domain name system 12.0.0 • f5 big-ip link controller 12.0.0 • f5 big-ip local traffic manager 12.0.0 • f5 big-ip policy enforcement manager 12.0.0 • oracle fujitsu m10 firmware (<= 2290) • redhat enterprise linux desktop 7.0 • redhat enterprise linux hpc node 7.0 • redhat enterprise linux hpc node eus 7.2 • redhat enterprise linux server 7.0 • redhat enterprise linux server aus 7.2 • redhat enterprise linux server eus 7.2 • redhat enterprise linux workstation 7.0 • gnu glibc 2.9 • gnu glibc 2.10 • gnu glibc 2.10.1 • gnu glibc 2.11 • gnu glibc 2.11.1 • gnu glibc 2.11.2 • gnu glibc 2.11.3 • gnu glibc 2.12 • gnu glibc 2.12.1 • gnu glibc 2.12.2 • gnu glibc 2.13 • gnu glibc 2.14 • gnu glibc 2.14.1 • gnu glibc 2.15 • gnu glibc 2.16 • gnu glibc 2.17 • gnu glibc 2.18 • gnu glibc 2.19 • gnu glibc 2.20 • gnu glibc 2.21 • gnu glibc 2.22

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References