Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-7547

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.

Published

2016-02-18T21:59:00.120

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 8.1 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

8.6

Impact Score

6.4

Weaknesses

Type: Primary
CWE-119

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	debian	debian_linux	8.0	Yes
Operating System	canonical	ubuntu_linux	12.04	Yes
Operating System	canonical	ubuntu_linux	14.04	Yes
Operating System	canonical	ubuntu_linux	15.10	Yes
Application	hp	helion_openstack	1.1.1	Yes
Application	hp	helion_openstack	2.0.0	Yes
Application	hp	helion_openstack	2.1.0	Yes
Application	hp	server_migration_pack	7.5	Yes
Application	sophos	unified_threat_management_software	9.319	Yes
Application	sophos	unified_threat_management_software	9.355	Yes
Application	suse	linux_enterprise_debuginfo	11.0	Yes
Application	suse	linux_enterprise_debuginfo	11.0	Yes
Application	suse	linux_enterprise_debuginfo	11.0	Yes
Operating System	opensuse	opensuse	13.2	Yes
Operating System	suse	linux_enterprise_desktop	11.0	Yes
Operating System	suse	linux_enterprise_desktop	11.0	Yes
Operating System	suse	linux_enterprise_desktop	12	Yes
Operating System	suse	linux_enterprise_desktop	12	Yes
Operating System	suse	linux_enterprise_server	11.0	Yes
Operating System	suse	linux_enterprise_server	11.0	Yes
Operating System	suse	linux_enterprise_server	11.0	Yes
Operating System	suse	linux_enterprise_server	11.0	Yes
Operating System	suse	linux_enterprise_server	12	Yes
Operating System	suse	linux_enterprise_software_development_kit	11.0	Yes
Operating System	suse	linux_enterprise_software_development_kit	11.0	Yes
Operating System	suse	linux_enterprise_software_development_kit	12	Yes
Operating System	suse	linux_enterprise_software_development_kit	12	Yes
Operating System	suse	suse_linux_enterprise_server	12	Yes
Application	oracle	exalogic_infrastructure	1.0	Yes
Application	oracle	exalogic_infrastructure	2.0	Yes
Application	f5	big-ip_access_policy_manager	12.0.0	Yes
Application	f5	big-ip_advanced_firewall_manager	12.0.0	Yes
Application	f5	big-ip_analytics	12.0.0	Yes
Application	f5	big-ip_application_acceleration_manager	12.0.0	Yes
Application	f5	big-ip_application_security_manager	12.0.0	Yes
Application	f5	big-ip_domain_name_system	12.0.0	Yes
Application	f5	big-ip_link_controller	12.0.0	Yes
Application	f5	big-ip_local_traffic_manager	12.0.0	Yes
Application	f5	big-ip_policy_enforcement_manager	12.0.0	Yes
Operating System	oracle	fujitsu_m10_firmware	≤ 2290	Yes
Operating System	redhat	enterprise_linux_desktop	7.0	Yes
Operating System	redhat	enterprise_linux_hpc_node	7.0	Yes
Operating System	redhat	enterprise_linux_hpc_node_eus	7.2	Yes
Operating System	redhat	enterprise_linux_server	7.0	Yes
Operating System	redhat	enterprise_linux_server_aus	7.2	Yes
Operating System	redhat	enterprise_linux_server_eus	7.2	Yes
Operating System	redhat	enterprise_linux_workstation	7.0	Yes
Application	gnu	glibc	2.9	Yes
Application	gnu	glibc	2.10	Yes
Application	gnu	glibc	2.10.1	Yes
Application	gnu	glibc	2.11	Yes
Application	gnu	glibc	2.11.1	Yes
Application	gnu	glibc	2.11.2	Yes
Application	gnu	glibc	2.11.3	Yes
Application	gnu	glibc	2.12	Yes
Application	gnu	glibc	2.12.1	Yes
Application	gnu	glibc	2.12.2	Yes
Application	gnu	glibc	2.13	Yes
Application	gnu	glibc	2.14	Yes
Application	gnu	glibc	2.14.1	Yes
Application	gnu	glibc	2.15	Yes
Application	gnu	glibc	2.16	Yes
Application	gnu	glibc	2.17	Yes
Application	gnu	glibc	2.18	Yes
Application	gnu	glibc	2.19	Yes
Application	gnu	glibc	2.20	Yes
Application	gnu	glibc	2.21	Yes
Application	gnu	glibc	2.22	Yes

References

http://fortiguard.com/advisory/glibc-getaddrinfo-stack-overflow ([email protected])
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html ([email protected])
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177412.html ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00043.html Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00044.html Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=145596041017029&w=2 ([email protected])
http://marc.info/?l=bugtraq&m=145672440608228&w=2 ([email protected])
http://marc.info/?l=bugtraq&m=145690841819314&w=2 ([email protected])
http://marc.info/?l=bugtraq&m=145857691004892&w=2 ([email protected])
http://marc.info/?l=bugtraq&m=146161017210491&w=2 ([email protected])
http://packetstormsecurity.com/files/135802/glibc-getaddrinfo-Stack-Based-Buffer-Overflow.html ([email protected])
http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html ([email protected])
http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html ([email protected])
http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html ([email protected])
http://rhn.redhat.com/errata/RHSA-2016-0175.html ([email protected])
http://rhn.redhat.com/errata/RHSA-2016-0176.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2016-0225.html ([email protected])
http://rhn.redhat.com/errata/RHSA-2016-0277.html ([email protected])
http://seclists.org/fulldisclosure/2019/Sep/7 ([email protected])
http://seclists.org/fulldisclosure/2021/Sep/0 ([email protected])
http://seclists.org/fulldisclosure/2022/Jun/36 ([email protected])
http://support.citrix.com/article/CTX206991 ([email protected])
http://ubuntu.com/usn/usn-2900-1 Third Party Advisory ([email protected])
http://www.debian.org/security/2016/dsa-3480 ([email protected])
http://www.debian.org/security/2016/dsa-3481 Third Party Advisory ([email protected])
http://www.fortiguard.com/advisory/glibc-getaddrinfo-stack-overflow ([email protected])
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160304-01-glibc-en ([email protected])
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html Patch, Third Party Advisory ([email protected])
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html ([email protected])
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html ([email protected])
http://www.securityfocus.com/bid/83265 ([email protected])
http://www.securitytracker.com/id/1035020 ([email protected])
http://www.vmware.com/security/advisories/VMSA-2016-0002.html ([email protected])
https://access.redhat.com/articles/2161461 Third Party Advisory ([email protected])
https://blogs.sophos.com/2016/02/24/utm-up2date-9-355-released/ Third Party Advisory ([email protected])
https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/ Third Party Advisory ([email protected])
https://bto.bluecoat.com/security-advisory/sa114 Third Party Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=1293532 Issue Tracking, Third Party Advisory ([email protected])
https://googleonlinesecurity.blogspot.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html ([email protected])
https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05028479 Third Party Advisory ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04989404 Third Party Advisory ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05008367 ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05053211 ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073516 ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05098877 Third Party Advisory ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05125672 Third Party Advisory ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128937 Third Party Advisory ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05130958 Third Party Advisory ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05140858 Third Party Advisory ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176716 ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05212266 ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917 ([email protected])
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 ([email protected])
https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes ([email protected])
https://ics-cert.us-cert.gov/advisories/ICSA-16-103-01 ([email protected])
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40161 Third Party Advisory ([email protected])
https://kc.mcafee.com/corporate/index?page=content&id=SB10150 Third Party Advisory ([email protected])
https://seclists.org/bugtraq/2019/Sep/7 ([email protected])
https://security.gentoo.org/glsa/201602-02 Third Party Advisory ([email protected])
https://security.netapp.com/advisory/ntap-20160217-0002/ ([email protected])
https://sourceware.org/bugzilla/show_bug.cgi?id=18665 Issue Tracking ([email protected])
https://sourceware.org/ml/libc-alpha/2016-02/msg00416.html Mailing List, Vendor Advisory ([email protected])
https://support.f5.com/kb/en-us/solutions/public/k/47/sol47098834.html Third Party Advisory ([email protected])
https://support.lenovo.com/us/en/product_security/len_5450 ([email protected])
https://www.arista.com/en/support/advisories-notices/security-advisories/1255-security-advisory-17 ([email protected])
https://www.exploit-db.com/exploits/39454/ ([email protected])
https://www.exploit-db.com/exploits/40339/ ([email protected])
https://www.kb.cert.org/vuls/id/457759 ([email protected])
https://www.tenable.com/security/research/tra-2017-08 ([email protected])
http://fortiguard.com/advisory/glibc-getaddrinfo-stack-overflow (af854a3a-2127-422b-91ae-364da2661108)
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177412.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00043.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00044.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=145596041017029&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=145672440608228&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=145690841819314&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=145857691004892&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=146161017210491&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.com/files/135802/glibc-getaddrinfo-Stack-Based-Buffer-Overflow.html (af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html (af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html (af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2016-0175.html (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2016-0176.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2016-0225.html (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2016-0277.html (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2019/Sep/7 (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2021/Sep/0 (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2022/Jun/36 (af854a3a-2127-422b-91ae-364da2661108)
http://support.citrix.com/article/CTX206991 (af854a3a-2127-422b-91ae-364da2661108)
http://ubuntu.com/usn/usn-2900-1 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2016/dsa-3480 (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2016/dsa-3481 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.fortiguard.com/advisory/glibc-getaddrinfo-stack-overflow (af854a3a-2127-422b-91ae-364da2661108)
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160304-01-glibc-en (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/83265 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1035020 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/security/advisories/VMSA-2016-0002.html (af854a3a-2127-422b-91ae-364da2661108)
https://access.redhat.com/articles/2161461 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://blogs.sophos.com/2016/02/24/utm-up2date-9-355-released/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bto.bluecoat.com/security-advisory/sa114 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=1293532 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://googleonlinesecurity.blogspot.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05028479 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04989404 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05008367 (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05053211 (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073516 (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05098877 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05125672 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128937 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05130958 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05140858 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380 (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176716 (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05212266 (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917 (af854a3a-2127-422b-91ae-364da2661108)
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 (af854a3a-2127-422b-91ae-364da2661108)
https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes (af854a3a-2127-422b-91ae-364da2661108)
https://ics-cert.us-cert.gov/advisories/ICSA-16-103-01 (af854a3a-2127-422b-91ae-364da2661108)
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40161 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://kc.mcafee.com/corporate/index?page=content&id=SB10150 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://seclists.org/bugtraq/2019/Sep/7 (af854a3a-2127-422b-91ae-364da2661108)
https://security.gentoo.org/glsa/201602-02 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20160217-0002/ (af854a3a-2127-422b-91ae-364da2661108)
https://sourceware.org/bugzilla/show_bug.cgi?id=18665 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://sourceware.org/ml/libc-alpha/2016-02/msg00416.html Mailing List, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.f5.com/kb/en-us/solutions/public/k/47/sol47098834.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.lenovo.com/us/en/product_security/len_5450 (af854a3a-2127-422b-91ae-364da2661108)
https://www.arista.com/en/support/advisories-notices/security-advisories/1255-security-advisory-17 (af854a3a-2127-422b-91ae-364da2661108)
https://www.exploit-db.com/exploits/39454/ (af854a3a-2127-422b-91ae-364da2661108)
https://www.exploit-db.com/exploits/40339/ (af854a3a-2127-422b-91ae-364da2661108)
https://www.kb.cert.org/vuls/id/457759 (af854a3a-2127-422b-91ae-364da2661108)
https://www.tenable.com/security/research/tra-2017-08 (af854a3a-2127-422b-91ae-364da2661108)