CVE-2015-0235

Fixed in a distro release EPSS 95%

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

Published 2015-01-28 · CVE record · OSV

Products: gnu glibc, oracle communications_application_session_controller, oracle communications_eagle_application_processor, oracle communications_eagle_lnp_application_processor, oracle communications_lsms, oracle communications_policy_management, oracle communications_session_border_controller, oracle communications_user_data_repository, oracle communications_webrtc_session_controller, oracle exalogic_infrastructure, oracle vm_virtualbox, oracle linux, debian_linux, redhat virtualization, apple mac_os_x, ibm pureapplication_system, ibm security_access_manager_for_enterprise_single_sign-on, php

Distro releases