Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-5277
HistoryDec 17, 2015 - 7:59 p.m.

CVE-2015-5277

2015-12-1719:59:02
CWE-119
[email protected]
web.nvd.nist.gov
56
cve-2015-5277
get_contents function
nss
glibc
libc6
denial of service
heap corruption
privilege escalation

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON

The get_contents function in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) before 2.20 might allow local users to cause a denial of service (heap corruption) or gain privileges via a long line in the NSS files database.

Affected configurations

NVD
Node
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_hpc_nodeMatch7.0
OR
redhatenterprise_linux_serverMatch7.0
OR
redhatenterprise_linux_workstationMatch7.0
Node
gnuglibcRange≤2.19
Node
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch15.10

Related

openvas 7
nessus 10
centos 1
ubuntucve 1
prion 1
nvd 1
debiancve 1
oraclelinux 1
ibm 4
redhat 2
cvelist 1
amazon 1
gentoo 1
cloudfoundry 1
ubuntu 2
packetstorm 1
openvas
openvas
Oracle: Security Advisory (ELSA-2015-2172)
2015-11-27 00:00:00
RedHat Update for glibc RHSA-2015:2172-01
2015-11-20 00:00:00
RedHat Update for glibc RHSA-2016:2573-02
2016-11-04 00:00:00
nessus
nessus
CentOS 7 : glibc (CESA-2015:2172)
2015-12-02 00:00:00
Oracle Linux 7 : glibc (ELSA-2015-2172)
2015-11-30 00:00:00
RHEL 7 : glibc (RHSA-2015:2172)
2015-11-20 00:00:00
centos
centos
glibc, nscd security update
2015-12-01 22:24:31
ubuntucve
ubuntucve
CVE-2015-5277
2015-12-17 00:00:00
prion
prion
Heap overflow
2015-12-17 19:59:00
nvd
nvd
CVE-2015-5277
2015-12-17 19:59:02
debiancve
debiancve
CVE-2015-5277
2015-12-17 19:59:02
oraclelinux
oraclelinux
glibc security update
2015-11-25 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in Open Source GNU glibc affects IBM OS Images for Red Hat Linux Systems. (CVE-2015-5277)
2018-06-15 07:05:57
Security Bulletin: Vulnerability in GNU C Library affects IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch firmware (CVE-2015-5277)
2019-01-31 02:25:02
Security Bulletin: Multiple vulnerabilities in the GNU C Library (glibc) affect PowerKVM
2018-06-18 01:30:38
redhat
redhat
(RHSA-2015:2172) Important: glibc security update
2015-11-19 15:39:46
(RHSA-2015:2589) Important: glibc security update
2015-12-09 08:43:11
cvelist
cvelist
CVE-2015-5277
2015-12-17 19:00:00
amazon
amazon
Important: glibc
2015-12-14 10:00:00
gentoo
gentoo
GNU C Library: Multiple vulnerabilities
2017-02-19 00:00:00
cloudfoundry
cloudfoundry
USN-2985-2 GNU C Library regression | Cloud Foundry
2016-06-13 00:00:00
ubuntu
ubuntu
GNU C Library vulnerabilities
2016-05-25 00:00:00
GNU C Library regression
2016-05-26 00:00:00
packetstorm
packetstorm
Cisco Device Hardcoded Credentials / GNU glibc / BusyBox
2019-09-04 00:00:00

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON
Related for CVE-2015-5277
openvas7nessus10centos1ubuntucve1prion1nvd1debiancve1oraclelinux1ibm4redhat2cvelist1amazon1gentoo1cloudfoundry1ubuntu2packetstorm1