Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2015-1781

Опубликовано: 28 сент. 2015
Источник: ubuntu
Приоритет: low
CVSS2: 6.8

Описание

Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer.

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

not-affected

2.19-0ubuntu6.8
lucid

ignored

end of life
precise

released

2.15-0ubuntu10.14
precise/esm

not-affected

2.15-0ubuntu10.14
trusty

released

2.19-0ubuntu6.8
trusty/esm

not-affected

2.19-0ubuntu6.8
upstream

needs-triage

utopic

DNE

vivid

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

2.23-0ubuntu1
esm-infra-legacy/trusty

DNE

esm-infra/xenial

not-affected

2.23-0ubuntu1
lucid

DNE

precise

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

needs-triage

utopic

ignored

end of life

Показывать по

6.8 Medium

CVSS2

Связанные уязвимости

redhat
около 10 лет назад

Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer.

nvd
больше 9 лет назад

Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer.

debian
больше 9 лет назад

Buffer overflow in the gethostbyname_r and other unspecified NSS funct ...

github
около 3 лет назад

Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer.

suse-cvrf
больше 9 лет назад

Security update for glibc

6.8 Medium

CVSS2