CVE-2015-5229
Fixed in a distro release EPSS 2%
The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of service (hang or crash) via unspecified vectors.
Products: redhat enterprise_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_hpc_node_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 6 | glibc | 0:2.12-1.166.el6_7.1 |
| Red Hat Enterprise Linux 6 | glibc-common | 0:2.12-1.166.el6_7.1 |
| Red Hat Enterprise Linux 6 | glibc-debuginfo | 0:2.12-1.166.el6_7.1 |
| Red Hat Enterprise Linux 6 | glibc-debuginfo-common | 0:2.12-1.166.el6_7.1 |
| Red Hat Enterprise Linux 6 | glibc-devel | 0:2.12-1.166.el6_7.1 |
| Red Hat Enterprise Linux 6 | glibc-headers | 0:2.12-1.166.el6_7.1 |
| Red Hat Enterprise Linux 6 | glibc-static | 0:2.12-1.166.el6_7.1 |
| Red Hat Enterprise Linux 6 | glibc-utils | 0:2.12-1.166.el6_7.1 |
| Red Hat Enterprise Linux 6 | nscd | 0:2.12-1.166.el6_7.1 |
| Red Hat Enterprise Linux 7 | glibc | 0:2.17-106.el7_2.4 |
| Red Hat Enterprise Linux 7 | glibc-common | 0:2.17-106.el7_2.4 |
| Red Hat Enterprise Linux 7 | glibc-debuginfo | 0:2.17-106.el7_2.4 |
| Red Hat Enterprise Linux 7 | glibc-debuginfo-common | 0:2.17-106.el7_2.4 |
| Red Hat Enterprise Linux 7 | glibc-devel | 0:2.17-106.el7_2.4 |
| Red Hat Enterprise Linux 7 | glibc-headers | 0:2.17-106.el7_2.4 |
| Red Hat Enterprise Linux 7 | glibc-static | 0:2.17-106.el7_2.4 |
| Red Hat Enterprise Linux 7 | glibc-utils | 0:2.17-106.el7_2.4 |
| Red Hat Enterprise Linux 7 | nscd | 0:2.17-106.el7_2.4 |