Skip to content
OpenAdvisories
Unscored RHSA-2015:0090 1 CVE

Red Hat Security Advisory: glibc security update

Published Sep 13, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client glibc 0:2.5-123.el5_11.1
Red Hat · RHEL 5 enterprise_linux:5::client glibc-common 0:2.5-123.el5_11.1
Red Hat · RHEL 5 enterprise_linux:5::client glibc-debuginfo 0:2.5-123.el5_11.1
Red Hat · RHEL 5 enterprise_linux:5::client glibc-debuginfo-common 0:2.5-123.el5_11.1
Red Hat · RHEL 5 enterprise_linux:5::client glibc-devel 0:2.5-123.el5_11.1
Red Hat · RHEL 5 enterprise_linux:5::client glibc-headers 0:2.5-123.el5_11.1
Red Hat · RHEL 5 enterprise_linux:5::client glibc-utils 0:2.5-123.el5_11.1
Red Hat · RHEL 5 enterprise_linux:5::client nscd 0:2.5-123.el5_11.1
Red Hat · RHEL 5 enterprise_linux:5::server glibc 0:2.5-123.el5_11.1
Red Hat · RHEL 5 enterprise_linux:5::server glibc-common 0:2.5-123.el5_11.1
Red Hat · RHEL 5 enterprise_linux:5::server glibc-debuginfo 0:2.5-123.el5_11.1
Red Hat · RHEL 5 enterprise_linux:5::server glibc-debuginfo-common 0:2.5-123.el5_11.1
Red Hat · RHEL 5 enterprise_linux:5::server glibc-devel 0:2.5-123.el5_11.1
Red Hat · RHEL 5 enterprise_linux:5::server glibc-headers 0:2.5-123.el5_11.1
Red Hat · RHEL 5 enterprise_linux:5::server glibc-utils 0:2.5-123.el5_11.1
Red Hat · RHEL 5 enterprise_linux:5::server nscd 0:2.5-123.el5_11.1

Vulnerabilities 1

  • Unscored —
    CVE-2015-0235 Public exploit EPSS 95%

    Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,…

    glibc Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1183461
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0090.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-0235
  • article
    https://access.redhat.com/security/vulnerabilities/ghost
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0235
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0235
  • article
    http://www.openwall.com/lists/oss-security/2015/01/27/9
  • article
    https://access.redhat.com/articles/1332213
  • article
    https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability