The Linux GNU C Library (glibc) versions 2.2 and other 2.x versions before 2.18 are vulnerable to remote code execution via a vulnerability in the gethostbyname function. Exploitation of this vulnerability may allow a remote attacker to take control of an affected system.

US-CERT recommends users and administrators refer to their respective Linux or Unix-based OS vendor(s) for an appropriate patch if affected. Patches are available from Ubuntu, Red Hat, and Debian. The GNU C Library versions 2.18 and later are also available for experienced users and administrators to implement.

This product is provided subject to this Notification and this Privacy & Use policy.

Please share your thoughts.

We recently updated our anonymous product survey; we’d welcome your feedback.

References

www.debian.org/security/2015/dsa-3142

www.gnu.org/software/libc/

www.ubuntu.com/usn/usn-2485-1/

access.redhat.com/security/cve/CVE-2015-0235

nessus 53

cert 1

ibm 33

debian 2

f5 2

openvas 28

nvd 1

attackerkb 1

altlinux 2

exploitpack 2

metasploit 2

cvelist 1

ubuntucve 1

checkpoint_security 1

lenovo 2

osv 2

packetstorm 6

amazon 3

thn 3

redhat 5

prion 1

freebsd 2

securityvulns 4

debiancve 1

zdt 4

threatpost 2

checkpoint_advisories 1

ics 2

slackware 1

centos 2

veracode 1

fortinet 1

arista 1

suse 3

oraclelinux 5

vulnerlab 2

huawei 1

cisco 1

ubuntu 1

paloalto 1

citrix 1

cve 1

seebug 1

cloudfoundry 1

exploitdb 2

fedora 2

archlinux 2

gentoo 1

nessus

Mandriva Linux Security Advisory : glibc (MDVSA-2015:039)

2015-02-11 00:00:00

Amazon Linux AMI : glibc (ALAS-2015-473)

2015-01-27 00:00:00

Cisco NX-OS GNU C Library (glibc) Buffer Overflow (GHOST)

2016-07-19 00:00:00

cert

GNU C Library (glibc) __nss_hostname_digits_dots() function vulnerable to buffer overflow

2015-01-28 00:00:00

ibm

Security Bulletin: GNU C library (glibc) vulnerability affects IBM XIV Storage System Gen2 (CVE-2015-0235)

2018-06-18 00:09:09

Security Bulletin: GNU C library (glibc) vulnerability affects IBM Netezza Host Management (CVE-2015-0235)

2019-10-18 03:10:29

Security Bulletin: GNU C library (glibc) vulnerability affects IBM SDN-VE Unified Controller and IBM SDN-VE Service Appliance (CVE-2015-0235)

2018-06-18 01:27:51

debian

[SECURITY] [DLA 139-1] eglibc security update

2015-01-28 10:25:42

[SECURITY] [DSA 3142-1] eglibc security update

2015-01-27 15:39:01

K16057 : GHOST: glibc gethostbyname buffer overflow vulnerability CVE-2015-0235

2015-10-09 00:00:00

SOL16057 - GHOST: glibc gethostbyname buffer overflow vulnerability CVE-2015-0235

2015-01-27 00:00:00

openvas

Amazon Linux: Security Advisory (ALAS-2015-473)

2015-09-08 00:00:00

SUSE: Security Advisory (SUSE-SU-2015:0158-1)

2021-06-09 00:00:00

CentOS Update for glibc CESA-2015:0092 centos7

2015-01-28 00:00:00

nvd

CVE-2015-0235

2015-01-28 19:59:00

attackerkb

Heap overflow in glibc 2.2 name resolution (CVE-2015-0235)

2015-01-28 00:00:00

altlinux

Security fix for the ALT Linux 6 package glibc version 6:2.11.3-alt8.M60P.2

2015-01-28 00:00:00

Security fix for the ALT Linux 5 package glibc version 6:2.11.2-alt1.M51.2

2015-01-28 00:00:00

exploitpack

Exim ESMTP 4.80 - glibc gethostbyname Denial of Service

2015-01-29 00:00:00

Exim - GHOST glibc gethostbyname Buffer Overflow (Metasploit)

2015-03-18 00:00:00

metasploit

WordPress XMLRPC GHOST Vulnerability Scanner

2015-01-30 14:29:51

Exim GHOST (glibc gethostbyname) Buffer Overflow

2015-03-18 23:51:16

cvelist

CVE-2015-0235

2015-01-28 19:00:00

ubuntucve

CVE-2015-0235

2015-01-27 00:00:00

checkpoint_security

Check Point Response to CVE-2015-0235 (glibc - GHOST)

2015-01-26 22:00:00

lenovo

GNU C Library (glibc) __nss_hostname_digits_dots() function vulnerable to buffer overflow (

2016-07-22 00:00:00

GNU C Library (glibc) __nss_hostname_digits_dots() function vulnerable to buffer overflow ("GHOST")

2016-07-22 00:00:00

osv

eglibc - security update

2015-01-28 00:00:00

eglibc - security update

2015-01-27 00:00:00

packetstorm

Exim GHOST (glibc gethostbyname) Buffer Overflow

2015-03-24 00:00:00

Exim ESMTP GHOST Denial Of Service

2015-01-29 00:00:00

Qualys Security Advisory - glibc gethostbyname Buffer Overflow

2015-01-27 00:00:00

amazon

Critical: glibc

2015-01-27 11:41:00

Critical: php55

2015-03-23 08:29:00

Critical: php54

2015-03-13 10:00:00

thn

Critical GHOST vulnerability affects most Linux Systems

2015-01-27 21:17:00

GHOST glibc Vulnerability Affects WordPress and PHP applications

2015-01-29 23:53:00

Critical glibc Flaw Puts Linux Machines and Apps at Risk (Patch Immediately)

2016-02-16 21:27:00

redhat

(RHSA-2015:0090) Critical: glibc security update

2015-01-27 00:00:00

(RHSA-2015:0099) Critical: glibc security update

2015-01-28 00:00:00

(RHSA-2015:0092) Critical: glibc security update

2015-01-27 00:00:00

prion

Heap overflow

2015-01-28 19:59:00

freebsd

glibc -- gethostbyname buffer overflow

2015-01-27 00:00:00

php5 -- multiple vulnerabilities

2015-02-18 00:00:00

securityvulns

Qualys Security Advisory CVE-2015-0235 - GHOST: glibc gethostbyname buffer overflow

2015-02-02 00:00:00

GNU glibc gethostbyname functions buffer overflow

2015-02-02 00:00:00

ESA-2015-040: EMC Secure Remote Services Virtual Edition Security Update for Multiple Vulnerabilities

2015-03-16 00:00:00

debiancve

CVE-2015-0235

2015-01-28 19:59:00

zdt

Exim GHOST (glibc gethostbyname) Buffer Overflow Exploit

2015-03-19 00:00:00

Exim ESMTP GHOST Denial Of Service Exploit

2015-01-29 00:00:00

Nexans FTTO GigaSwitch Outdated Components / Hardcoded Backdoor Vulnerability

2022-06-21 00:00:00

threatpost

Ghost glibc Vulnerability Patching and Exploits

2015-01-28 13:28:29

GHOST glibc Linux Remote Code Execution Vulnerability

2015-01-27 12:55:29

checkpoint_advisories

GNU C Library gethostbyname Buffer Overflow (CVE-2015-0235)

2015-01-28 00:00:00

ics

Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability

2018-09-10 12:00:00

Siemens SIMATIC HMI Basic, SINUMERIK, and Ruggedcom APE GHOST Vulnerability (Update A)

2018-08-27 12:00:00

slackware

[slackware-security] glibc

2015-01-28 20:35:21

centos

glibc, nscd security update

2015-01-27 23:31:01

glibc, nscd security update

2015-01-27 22:59:55

veracode

Arbitrary Code Execution

2019-01-15 09:04:16

fortinet

CVE-2015-0235 "GHOST" vulnerability

2015-01-28 00:00:00

arista

Security Advisory 0009

2015-01-28 00:00:00

suse

glibc (critical)

2015-01-28 19:04:53

Security update for glibc (critical)

2015-01-28 03:04:56

Security update for glibc (critical)

2015-02-02 09:04:48

oraclelinux

glibc security update

2015-01-27 00:00:00

glibc security update

2015-01-29 00:00:00

glibc security update

2015-08-17 00:00:00

vulnerlab

Glibc Ghost Vulnerability (CVE-2015-0235) - How to Secure

2015-01-30 00:00:00

Glibc Ghost Vulnerability (CVE-2015-0235) - How to Secure

2015-01-30 00:00:00

huawei

Security Advisory - Glibc Buffer Overflow Vulnerability

2015-02-26 00:00:00

cisco

GNU glibc gethostbyname Function Buffer Overflow Vulnerability

2015-01-28 22:30:00

ubuntu

GNU C Library vulnerability

2015-01-27 00:00:00

paloalto

GHOST: glibc vulnerability

2015-02-02 08:00:00

citrix

CVE-2015-0235 - Citrix Security Advisory for glibc GHOST Vulnerability

2015-01-28 04:00:00

cve

CVE-2015-0235

2015-01-28 19:59:00

seebug

Linux glibc 缓冲区溢出 (幽灵(Ghost))

2015-07-02 00:00:00

cloudfoundry

CVE-2015-0235 - GHOST | Cloud Foundry

2015-01-28 00:00:00

exploitdb

Exim - 'GHOST' glibc gethostbyname Buffer Overflow (Metasploit)

2015-03-18 00:00:00

Exim ESMTP 4.80 - glibc gethostbyname Denial of Service

2015-01-29 00:00:00

fedora

[SECURITY] Fedora 21 Update: php-5.6.6-1.fc21

2015-02-23 23:28:40

[SECURITY] Fedora 20 Update: php-5.5.22-1.fc20

2015-03-04 10:24:35

archlinux

jasper: arbitrary code execution

2015-01-27 00:00:00

flashplugin: multiple issues

2015-01-23 00:00:00

gentoo

GNU C Library: Multiple vulnerabilities

2015-03-08 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

0.975 High

EPSS

Percentile

100.0%

JSON

Related for CISA:E8C8F007DF2A448F84459142FD8D46F7