CVE-2015-7547

Fixed in a distro release EPSS 91%

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.

Published 2016-02-18 · CVE record · OSV

Products: debian_linux, canonical ubuntu_linux, hp helion_openstack, hp server_migration_pack, sophos unified_threat_management_software, suse linux_enterprise_debuginfo, opensuse, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, suse_linux_enterprise_server, oracle exalogic_infrastructure, f5 big-ip_access_policy_manager, f5 big-ip_advanced_firewall_manager, f5 big-ip_analytics, f5 big-ip_application_acceleration_manager, f5 big-ip_application_security_manager, f5 big-ip_domain_name_system, f5 big-ip_link_controller, f5 big-ip_local_traffic_manager, f5 big-ip_policy_enforcement_manager, oracle fujitsu_m10_firmware, redhat enterprise_linux_desktop, redhat enterprise_linux_hpc_node, redhat enterprise_linux_hpc_node_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_workstation, gnu glibc

Distro releases