GNU libc: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Unscored —
  CVE-2015-5229

  The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize me…

  Apr 8, 2016
• Unscored —
  CVE-2015-7547 Public exploit EPSS 92%

  Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU …

  glibc eglibc Debian Ubuntu
  Feb 18, 2016

Revision history

1. 2023-04-16 #25

   Neue Updates von IBM aufgenommen

2. 2020-08-11 #24

   Neue Updates von Huawei aufgenommen

3. 2020-07-08 #23

   Neue Updates von Juniper aufgenommen

4. 2016-11-09 #22

   New remediations available

5. 2016-07-03 #20

   New remediations available

6. 2016-07-03 #21

   Version nicht vorhanden

7. 2016-04-28 #17

   New remediations available

8. 2016-04-28 #18

   Version nicht vorhanden

9. 2016-04-28 #19

   Version nicht vorhanden

10. 2016-03-15 #15

    New remediations available

11. 2016-03-15 #16

    Version nicht vorhanden

12. 2016-03-14 #14

    New remediations available

13. 2016-03-03 #12

    New remediations available

14. 2016-03-03 #13

    Version nicht vorhanden

15. 2016-02-25 #11

    New remediations available

16. 2016-02-22 #9

    New remediations available

17. 2016-02-22 #10

    Version nicht vorhanden

18. 2016-02-21 #7

    New remediations available

19. 2016-02-21 #8

    Version nicht vorhanden

20. 2016-02-18 #5

    New remediations available

21. 2016-02-18 #6

    Version nicht vorhanden

22. 2016-02-16 #1

    Initial Release

23. 2016-02-16 #2

    Version nicht vorhanden

24. 2016-02-16 #3

    Version nicht vorhanden

25. 2016-02-16 #4

    Version nicht vorhanden

References

• IBM Security Bulletin 868550 vom 2023-04-14
  https://www.ibm.com/support/pages/node/868550
• IBM Security Bulletin 868518 vom 2023-04-14
  https://www.ibm.com/support/pages/node/868518
• Red Hat Security Advisory RHSA-2016:0225 vom 2016-02-16
  https://rhn.redhat.com/errata/RHSA-2016-0225.html
• Red Hat Security Advisory RHSA-2016:0175 vom 2016-02-16
  https://rhn.redhat.com/errata/RHSA-2016-0175.html
• Red Hat Security Advisory RHSA-2016:0176 vom 2016-02-16
  https://rhn.redhat.com/errata/RHSA-2016-0176.html
• Ubuntu Security Notice USN-2900-1 vom 2016-02-16
  http://www.ubuntu.com/usn/usn-2900-1/
• Arista Security Advisory 0017 vom 2016-02-16
  http://www.arista.com/en/support/advisories-notices/security-advisories/1255-security-advisory-17
• Google Online Security Blog vom 2016-02-16
  https://googleonlinesecurity.blogspot.de/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html
• Proof-of-Concept vom 2016-02-16
  https://github.com/fjserna/CVE-2015-7547
• SUSE Security Update SUSE-SU-2016:0470-1 vom 2016-02-16
  http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html
• SUSE Security Update SUSE-SU-2016:0471-1 vom 2016-02-16
  http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html
• SUSE Security Update SUSE-SU-2016:0472-1 vom 2016-02-16
  http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html
• SUSE Security Update SUSE-SU-2016:0473-1 vom 2016-02-16
  http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html
• Debian Security Advisory DSA-3480-1 vom 2016-02-16
  https://www.debian.org/security/2016/dsa-3480
• Debian Security Advisory DSA-3481-1 vom 2016-02-16
  https://www.debian.org/security/2016/dsa-3481
• Oracle Enterprise Linux Security Advisory ELSA-2016-0175 vom 2016-02-16
  http://linux.oracle.com/errata/ELSA-2016-0175.html
• CISCO Security Advisory CISCO-SA-20160218-GLIBC vom 2016-02-19
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160218-glibc
• Citrix Security Advisory CTX206991 vom 2016-02-19
  http://support.citrix.com/article/CTX206991
• BLUECOAT Security Advisory SA114 vom 2016-02-20
  https://bto.bluecoat.com/security-advisory/sa114
• VMware Security Advisory VMSA-2016-0002 vom 2016-02-22
  http://www.vmware.com/security/advisories/VMSA-2016-0002.html
• Fortiguard Info
  http://www.fortiguard.com/advisory/glibc-getaddrinfo-stack-overflow
• IBM Security Bulletin 1977801 vom 2016-03-03
  http://www-01.ibm.com/support/docview.wss?uid=swg21977801
• SUSE Security Update SUSE-SU-2016:0748-1 vom 2016-03-14
  https://www.suse.com/support/update/announcement/2016/suse-su-20160748-1.html
• SUSE Security Update SUSE-SU-2016:0778-1 vom 2016-03-15
  https://lists.opensuse.org/opensuse-security-announce/2016-03/msg00051.html
• F5 Security Advisory SOL47098834 vom 2016-02-16
  http://support.f5.com/kb/en-us/solutions/public/k/47/sol47098834.html?ref=rss
• Xerox Mini Bulletin XRX16Q vom 2016-06-30
  https://www.xerox.com/download/security/security-bulletin/36b94-5368284530883/cert_Mini_Security_Bulletin_XRX16Q_for_ConnectKey_R16-05_v1-0.pdf
• Oracle Linux Security Advisory ELSA-2016-2573 vom 2016-11-09
  http://linux.oracle.com/errata/ELSA-2016-2573.html
• Juniper Security Advisory JSA11023 vom 2020-07-08
  http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11023
• Huawei Security Advisory HUAWEI-SA-20160304-01-GLIBC vom 2020-08-12
  https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160304-01-glibc-en