CVE-2015-0235

HIGH · 10.0 CVSS Gepubliceerd: 28-01-2015 CWE-787

Beschrijving

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

Vendors

Gnu Oracle Debian Redhat Apple Ibm Php

Affected products

Glibc Communications Application Session Controller Communications Eagle Application Processor Communications Eagle Lnp Application Processor Communications Lsms Communications Policy Management Communications Session Border Controller Communications User Data Repository Communications Webrtc Session Controller Exalogic Infrastructure Vm Virtualbox Linux Debian Linux Virtualization Mac Os X Pureapplication System Security Access Manager For Enterprise Single Sign-on Php

Beschrijving

Vendors

Affected products

References