Tracker / CVE-2015-7547
CVE-2015-7547
Alta 8.1
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.
Prodotti e versioni affette
| canonical | ubuntu_linux |
|---|---|
| debian | debian_linux |
| f5 | big-ip_access_policy_manager |
| f5 | big-ip_advanced_firewall_manager |
| f5 | big-ip_analytics |
| f5 | big-ip_application_acceleration_manager |
| f5 | big-ip_application_security_manager |
| f5 | big-ip_domain_name_system |
| f5 | big-ip_link_controller |
| f5 | big-ip_local_traffic_manager |
| f5 | big-ip_policy_enforcement_manager |
| gnu | glibc |
| hp | helion_openstack |
| hp | server_migration_pack |
| opensuse | opensuse |
| oracle | exalogic_infrastructure |
| oracle | fujitsu_m10_firmware · … → 2290 |
| redhat | enterprise_linux_desktop |
| redhat | enterprise_linux_hpc_node |
| redhat | enterprise_linux_hpc_node_eus |
| redhat | enterprise_linux_server |
| redhat | enterprise_linux_server_aus |
| redhat | enterprise_linux_server_eus |
| redhat | enterprise_linux_workstation |
| sophos | unified_threat_management_software |
| suse | linux_enterprise_debuginfo |
| suse | linux_enterprise_desktop |
| suse | linux_enterprise_server |
| suse | linux_enterprise_software_development_kit |
| suse | suse_linux_enterprise_server |
Analisi
Questa pagina non è ancora indicizzabile.Finché non contiene un’analisi originale — cosa espone davvero, come verificare in due minuti se un sistema è stato toccato, cosa fare se lo è stato — la pagina resta noindex. È il database a deciderlo, non il modello di pagina.