Patchwire CVEs, their patch status, and feeds to follow them

CVE-2015-5229

Fixed in a distro release EPSS 2%

The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of service (hang or crash) via unspecified vectors.

Published 2016-04-08 · CVE record · OSV

Products: redhat enterprise_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_hpc_node_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation

Distro releases

ReleasePackageFixed in
Red Hat Enterprise Linux 6glibc0:2.12-1.166.el6_7.1
Red Hat Enterprise Linux 6glibc-common0:2.12-1.166.el6_7.1
Red Hat Enterprise Linux 6glibc-debuginfo0:2.12-1.166.el6_7.1
Red Hat Enterprise Linux 6glibc-debuginfo-common0:2.12-1.166.el6_7.1
Red Hat Enterprise Linux 6glibc-devel0:2.12-1.166.el6_7.1
Red Hat Enterprise Linux 6glibc-headers0:2.12-1.166.el6_7.1
Red Hat Enterprise Linux 6glibc-static0:2.12-1.166.el6_7.1
Red Hat Enterprise Linux 6glibc-utils0:2.12-1.166.el6_7.1
Red Hat Enterprise Linux 6nscd0:2.12-1.166.el6_7.1
Red Hat Enterprise Linux 7glibc0:2.17-106.el7_2.4
Red Hat Enterprise Linux 7glibc-common0:2.17-106.el7_2.4
Red Hat Enterprise Linux 7glibc-debuginfo0:2.17-106.el7_2.4
Red Hat Enterprise Linux 7glibc-debuginfo-common0:2.17-106.el7_2.4
Red Hat Enterprise Linux 7glibc-devel0:2.17-106.el7_2.4
Red Hat Enterprise Linux 7glibc-headers0:2.17-106.el7_2.4
Red Hat Enterprise Linux 7glibc-static0:2.17-106.el7_2.4
Red Hat Enterprise Linux 7glibc-utils0:2.17-106.el7_2.4
Red Hat Enterprise Linux 7nscd0:2.17-106.el7_2.4