GNU libc: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes

Summary

Product

Vulnerabilities 1

• Unscored —
  CVE-2015-0235 Public exploit EPSS 95%

  Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,…

  glibc Debian
  Jan 28, 2015

Revision history

1. 2023-04-16 #25

   Neue Updates von IBM aufgenommen

2. 2015-06-14 #24

   Version nicht vorhanden

3. 2015-06-01 #20

   New remediations available

4. 2015-06-01 #21

   New remediations available

5. 2015-06-01 #22

   Version nicht vorhanden

6. 2015-06-01 #23

   Version nicht vorhanden

7. 2015-05-26 #18

   New remediations available

8. 2015-05-26 #19

   Version nicht vorhanden

9. 2015-03-17 #16

   New remediations available

10. 2015-03-17 #17

    Version nicht vorhanden

11. 2015-02-10 #12

    New remediations available

12. 2015-02-10 #13

    Version nicht vorhanden

13. 2015-02-10 #14

    Version nicht vorhanden

14. 2015-02-10 #15

    Version nicht vorhanden

15. 2015-02-04 #7

    New remediations available

16. 2015-02-04 #8

    Version nicht vorhanden

17. 2015-02-04 #9

    Version nicht vorhanden

18. 2015-02-04 #10

    Version nicht vorhanden

19. 2015-02-04 #11

    Version nicht vorhanden

20. 2015-01-28 #3

    New remediations available

21. 2015-01-28 #4

    Version nicht vorhanden

22. 2015-01-28 #5

    Version nicht vorhanden

23. 2015-01-28 #6

    Version nicht vorhanden

24. 2015-01-27 #1

    Initial Release

25. 2015-01-27 #2

    Version nicht vorhanden

References

• IBM Security Bulletin 867654 vom 2023-04-14
  https://www.ibm.com/support/pages/node/867654
• RedHat Security Advisory: RHSA-2015-0090 vom 2015-01-27
  https://rhn.redhat.com/errata/RHSA-2015-0090.html
• Qualys Security Advisory CVE-2015-0235
  https://www.qualys.com/research/security-advisories/GHOST-CVE-2015-0235.txt
• RedHat Security Advisory: RHSA-2015-0092 vom 2015-01-27
  http://rhn.redhat.com/errata/RHSA-2015-0092.html
• Ubuntu Security Notice USN-2485-1 vom 2015-01-27
  http://www.ubuntu.com/usn/usn-2485-1/
• SUSE Security Update Announcement ID SUSE-SU-2015:0158-1 vom 2015-01-27
  http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00028.html
• CentOS Errata and Security Advisory CESA-2015:0090 vom 2015-01-27
  http://lists.centos.org/pipermail/centos-announce/2015-January/020906.html
• CentOS Errata and Security Advisory CESA-2015:0092 vom 2015-01-27
  http://lists.centos.org/pipermail/centos-announce/2015-January/020907.html
• CentOS Errata and Security Advisory CESA-2015:0092 vom 2015-01-27
  http://lists.centos.org/pipermail/centos-announce/2015-January/020908.html
• sa90 vom 2015-01-28
  https://kb.bluecoat.com/security-advisory/sa90
• CTX200391 vom 2015-01-28
  http://support.citrix.com/article/CTX200391
• Red Hat Security Advisory RHSA-2015:0101-1 vom 2015-01-28
  http://rhn.redhat.com/errata/RHSA-2015-0101.html
• Red Hat Security Advisory RHSA-2015:0099-1 vom 2015-01-28
  http://rhn.redhat.com/errata/RHSA-2015-0099.html
• Cisco Security Advisory ID cisco-sa-20150128-ghost vom 2015-01-28
  http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150128-ghost
• A10 Networks Security Advisory A10-CVE-2015-0235 vom 2015-01-28
  http://www.a10networks.com/support/advisories/A10-CVE-2015-0235.pdf
• Splunk Support SP-CAAANVJ vom 2015-01-28
  http://www.splunk.com/view/SP-CAAANVJ
• Juniper Knowledge Base JSA10671 vom 2015-01-28
  http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10671
• Fortinet Security Advisory FG-IR-15-001 vom 2015-02-02
  http://www.fortiguard.com/advisory/FG-IR-15-001/
• Red Hat Security Advisory RHSA-2015:0126-1 vom 2015-02-04
  http://rhn.redhat.com/errata/RHSA-2015-0126.html
• FSC-2015-1: Notice on "GHOST" glibc gethostbyname() Vulnerability vom 2015-02-04
  https://www.f-secure.com/en/web/labs_global/fsc-2015-1
• Xerox Security Bulletin XRX15-002
  https://www.xerox.com/download/security/security-bulletin/20b99-50ea924244563/cert_XRX15-002_v1.0.pdf
• Mandriva Security Advisory MDVSA-2015:039 vom 2015-02-10
  http://www.mandriva.com/de/support/security/advisories/advisory/MDVSA-2015%3A039/
• EMC Knowledge Base Article ESA-2015-054
  https://support.emc.com/kb/199839
• McAfee Email and Web Security Appliance: Release Notes für Hotfix 5.6h1021351
  https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/25000/PD25952/en_US/EWS-56h1021351-2964115_readme_en_US.pdf
• Xerox Mini Bulletin XRX15T
  https://www.xerox.com/download/security/security-bulletin/10cc1-5177652284a6f/cert_Security_Mini-_Bulletin_XRX15T_for_P6700_R15-05_v1.0.pdf
• Xerox Mini Bulletin XRX15S
  http://rss.xerox.com/~r/security-bulletins/~5/h7tERerEz7U/cert_Security_Mini-_Bulletin_XRX15S_for_P7800_R15-04_v1.0.pdf
• HP SECURITY BULLETIN c04647400 vom 2015-06-14
  https://h20566.www2.hp.com/hpsc/doc/public/display?calledBy=&docId=emr_na-c04647400&docLocale=en_US