Vulnerability Intelligence Report
CVE-2015-0235
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."
No Active Exploit Signals
CVSS Base Score
10.0
HIGH
EPSS Probability:94.86%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| gnu | glibc | all |
| oracle | communications_application_session_controller | all |
| oracle | communications_eagle_application_processor | 16.0 |
| oracle | communications_eagle_lnp_application_processor | 10.0 |
| oracle | communications_lsms | 13.1 |
| oracle | communications_policy_management | 9.7.3, 9.9.1, 10.4.1, 11.5, 12.1.1 |
| oracle | communications_session_border_controller | 7.2.0, 8.0.0 |
| oracle | communications_user_data_repository | all |
| oracle | communications_webrtc_session_controller | 7.0, 7.1, 7.2 |
| oracle | exalogic_infrastructure | 1.0, 2.0 |
| oracle | vm_virtualbox | all |
| oracle | linux | 5, 7 |
| debian | debian_linux | 7.0, 8.0 |
| redhat | virtualization | 6.0 |
| apple | mac_os_x | all |
| ibm | pureapplication_system | 1.0.0.0, 1.1.0.0, 2.0.0.0 |
| ibm | security_access_manager_for_enterprise_single_sign-on | 8.2 |
| php | php | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
94.859%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Red Hat, Inc. · Vendor · USA |
| Reserved | 2014-11-18T00:00:00 |
| Published | 2015-01-28T19:00:00 |
| Patch Date | 2015-01-27 |
| Last Updated | 2024-08-06T04:03:10 |
Community Chatter & Buzz