Lucene search
Huawei TechnologiesHUAWEI-SA-20150226-01-GLIBCHistoryFeb 26, 2015 - 12:00 a.m.
Security Advisory - Glibc Buffer Overflow Vulnerability
2015-02-2600:00:00
Huawei Technologies
www.huawei.com
119
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.975 High
EPSS
Percentile
100.0%
Huawei noticed that Qualys had disclosed the buffer overflow in the GNU C Library (glibc) on January 27th, 2015, Applications call various gethostbyname function are affected and attackers can exploit this vulnerability to perform remote code execution. (Vulnerability ID: HWPSIRT-2015-01045)
This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2015-0235.
This vulnerability was first disclosed by Qualys.
Currently, official fixes and workarounds are available.
Affected configurations
Node
huaweiar510Matchar510
ORhuaweiar510Matchv200r005c30
ORhuaweiar3200Matchar3200
ORhuaweiar3200Matchv200r005c30
ORhuaweibh620Range<V2.26
ORhuaweibh620Range<V7.05
ORhuaweibh620Matchbh621
ORhuaweibh620Matchv2
ORhuaweibh620Matchbh622
ORhuaweibh620Matchv2
ORhuaweibh620Matchbh640
ORhuaweibh620Matchv2
ORhuaweifusionserver_ch121_v3Range<V6.05
ORhuaweifusionserver_ch121_v3Range<V1.27
ORhuaweich140Range<V6.05
ORhuaweifusionserver_ch220_v3Range<V6.05
ORhuaweich221Range<V6.05
ORhuaweifusionserver_ch222_v3Range<V6.05
ORhuaweifusionserver_ch222_v3Range<V1.28
ORhuaweich240Range<V6.05
ORhuaweich242Range<V6.05
ORhuawei●ch242Range<V6.05
ORhuaweicloudengine_1800vMatch12800
ORhuaweicloudengine_1800vMatchv100r003c00
ORhuaweicloudengine_1800vMatch12800
ORhuaweicloudengine_1800vMatchv100r003c10
ORhuaweicloudengine_5800Match5800v100r003c00
ORhuaweicloudengine_5800Match5800v100r003c10
ORhuawei6800Match6800v100r003c00
ORhuawei6800Match6800v100r003c10
ORhuaweicloudengine_1800vMatch7800v100r003c00
ORhuaweicloudengine_1800vMatch7800v100r003c10
ORhuaweidcMatchv100r002
ORhuaweifusionserver_rh2288a_v2Range<V7.05
ORhuaweifusionserver_rh2288a_v2Matchdh320
ORhuaweifusionserver_rh2288a_v2Matchv2
ORhuaweifusionserver_rh2288a_v2Matchdh321
ORhuaweifusionserver_rh2288a_v2Matchv2
ORhuaweifusionserver_rh2288a_v2Matchdh620
ORhuaweifusionserver_rh2288a_v2Matchv2
ORhuaweifusionserver_rh2288a_v2Matchdh621
ORhuaweifusionserver_rh2288a_v2Matchv2
ORhuaweifusionserver_rh2288a_v2Matchdh628
ORhuaweifusionserver_rh2288a_v2Matchv2
ORhuaweie6000Range<V5.20
ORhuaweie9000_chassisRange<V3.05
ORhuaweiesightMatchv200r005c00
ORhuaweiesightMatchv200r003c10
ORhuaweiesightMatchv200r003c01
ORhuaweiespace_8950Matchv100r001
ORhuaweiespace_8950Matchv100r001
ORhuaweiespace_8950Matchv100r002
ORhuaweiespace_8950Matchv200r001c03
ORhuaweiespace_8950Matchv200r001c03
ORhuaweiivsMatchv100r001
ORhuaweiespace_7910Match7910
ORhuaweiespace_7910Matchv100r001c01
ORhuaweiespace_7910Match7910
ORhuaweiespace_7910Matchv100r001c50
ORhuaweiespace_7910Match7910
ORhuaweiespace_7910Matchv200r002c00
ORhuaweiespace_7910Match7910
ORhuaweiespace_7910Matchv200r003c00
ORhuaweiespace_7950Match7950
ORhuaweiespace_7950Matchv100r001c01
ORhuaweiespace_7950Match7950
ORhuaweiespace_7950Matchv100r001c02
ORhuaweiespace_7950Match7950
ORhuaweiespace_7950Matchv100r001c30
ORhuaweiespace_7950Match7950
ORhuaweiespace_7950Matchv100r001c50
ORhuaweiespace_7950Match7950
ORhuaweiespace_7950Matchv200r002c00
ORhuaweiespace_7950Match7950
ORhuaweiespace_7950Matchv200r003c00
ORhuaweiespace_8950Matchv100r001
ORhuaweiespace_8950Matchv200r001
ORhuaweiespace_8950Matchv100r001c11
ORhuaweiespace_8950Matchv100r001c21
ORhuaweiespace_8950Matchu2980
ORhuaweiespace_8950Matchv100r001
ORhuaweiespace_8950Matchu2990
ORhuaweiespace_8950Matchv200r001
ORhuaweiespace_8950Matchv200r002
ORhuaweiespace_8950Matchv100r001
ORhuaweifusionaccessMatchv100r005c10
ORhuaweifusionaccessMatchv100r005c20
ORhuaweifusioncloudMatchv100r005c20
ORhuaweifusioncomputeMatchv100r002c02
ORhuaweifusioncomputeMatchv100r003c00
ORhuaweifusioncomputeMatchv100r003c10
ORhuaweifusioncomputeMatchv100r005c00
ORhuaweifusionmanagerMatchv100r003c00
ORhuaweifusionmanagerMatchv100r003c10
ORhuaweifusionmanagerMatchv100r005c00
ORhuaweifusionmanagerMatchv100r005c10
ORhuaweifusionstorageMatchv100r003c00
ORhuaweifusionstorageMatchv100r003c02
ORhuaweigalax8800Matchgalax8800
ORhuaweigalax8800Matchv100r002c01
ORhuaweiipc6221-vrzMatchipc6221-vrz
ORhuaweiipc6221-vrzMatchv100r001c00
ORhuaweimanageoneMatchv100r001c01
ORhuaweinvsMatchv100r002
ORhuaweioceanstor_ismMatchv100r001c00
ORhuaweioceanstor_ismMatchhdp3500e
ORhuaweioceanstor_ismMatchv100r002c00
ORhuaweioceanstor_ismMatchhdp3500e
ORhuaweioceanstor_ismMatchv100r003c00
ORhuaweioceanstor_ismMatchv100r002c00
ORhuaweioceanstor_ismMatchv100r002c01
ORhuaweioceanstor_ismMatchvtl6900
ORhuaweioceanstor_ismMatchv100r005c00
ORhuaweioceanstor_ismMatchvtl6900
ORhuaweioceanstor_ismMatchv100r005c10
ORhuaweipublic_cloud_solutionMatchv100r001
ORhuaweirh1285Range<V2.28
ORhuaweirh2285Range<V2.25
ORhuaweifusionserver_rh1288_v3Range<V7.05
ORhuaweifusionserver_rh1288_v3Matchrh2265
ORhuaweifusionserver_rh1288_v3Matchv2
ORhuaweifusionserver_rh1288_v3Matchrh2285
ORhuaweifusionserver_rh1288_v3Matchv2
ORhuaweifusionserver_rh1288_v3Matchrh2265h
ORhuaweifusionserver_rh1288_v3Matchv2
ORhuaweifusionserver_rh1288_v3Matchrh2285h
ORhuaweifusionserver_rh1288_v3Matchv2
ORhuaweifusionserver_rh1288_v3Matchrh2268
ORhuaweifusionserver_rh1288_v3Matchv2
ORhuaweifusionserver_rh1288_v3Matchrh2288
ORhuaweifusionserver_rh1288_v3Matchv2
ORhuaweifusionserver_rh1288_v3Matchrh2288h
ORhuaweifusionserver_rh1288_v3Matchv2
ORhuaweifusionserver_rh1288_v3Matchrh2288e
ORhuaweifusionserver_rh1288_v3Matchv2
ORhuaweifusionserver_rh1288_v3Matchrh2485
ORhuaweifusionserver_rh1288_v3Matchv2
ORhuaweifusionserver_rh2288a_v2Range<V5.50
ORhuaweioceanstor_5800_v3Range<V7.05
ORhuaweioceanstor_5800_v3Range<V7.05
ORhuaweifusionserver_rh1288_v3Range<V1.28
ORhuaweifusionserver_rh1288_v3Matchrh2288
ORhuaweifusionserver_rh1288_v3Matchv3
ORhuaweifusionserver_rh1288_v3Matchrh2288h
ORhuaweifusionserver_rh1288_v3Matchv3
ORhuaweifusionserver_rh1288_v3Matchrh1288a
ORhuaweifusionserver_rh1288_v3Matchv2
ORhuaweifusionserver_rh1288_v3Matchrh2288a
ORhuaweifusionserver_rh1288_v3Matchv2
ORhuaweifusionserver_rh1288_v3Matchrh8100
ORhuaweifusionserver_rh1288_v3Matchv3
ORhuaweirse6500Matchrse6500
ORhuaweirse6500Matchv100r001c00
ORhuaweisap_hana_applianceMatchv100r001c00
ORhuaweitecal_e6000Matchxh310
ORhuaweitecal_e6000Matchv2
ORhuaweitecal_e6000Matchv100r001c00spc100
ORhuaweitecal_e6000Matchxh311
ORhuaweitecal_e6000Matchv2
ORhuaweitecal_e6000Matchv100r001c00
ORhuaweixh320Matchxh320
ORhuaweixh320Matchv2
ORhuaweixh320Matchv100r001c00
ORhuaweixh321_v5Matchxh321
ORhuaweixh321_v5Matchv2
ORhuaweixh321_v5Matchv100r002c00
ORhuaweitecal_e6000Matchxh621
ORhuaweitecal_e6000Matchv2
ORhuaweitecal_e6000Matchv100r001c00
ORhuaweiv1300nMatchv100r002
ORhuaweivaeMatchv100r001
ORhuaweixh320Range<V2.05
ORhuaweixh620Range<V2.17
ORhuaweifusionserver_rh2288a_v2Range<V7.05
ORhuaweifusionserver_rh2288a_v2Matchxh311
ORhuaweifusionserver_rh2288a_v2Matchv2
ORhuaweifusionserver_rh2288a_v2Matchxh320
ORhuaweifusionserver_rh2288a_v2Matchv2
ORhuaweifusionserver_rh2288a_v2Matchxh321
ORhuaweifusionserver_rh2288a_v2Matchv2
ORhuaweifusionserver_rh2288a_v2Matchxh621
ORhuaweifusionserver_rh2288a_v2Matchv2
ORhuaweifusionserver_xh628_v3Range<V1.28
ORhuaweifusionserver_xh628_v3Matchmm810
ORhuaweifusionserver_xh628_v3Matchv3
Related
nessus
nessus
Mandriva Linux Security Advisory : glibc (MDVSA-2015:039)
2015-02-11 00:00:00
Amazon Linux AMI : glibc (ALAS-2015-473)
2015-01-27 00:00:00
Cisco NX-OS GNU C Library (glibc) Buffer Overflow (GHOST)
2016-07-19 00:00:00
cert
cert
ibm
ibm
debian
debian
[SECURITY] [DLA 139-1] eglibc security update
2015-01-28 10:25:42
[SECURITY] [DSA 3142-1] eglibc security update
2015-01-27 15:39:01
f5
f5
attackerkb
attackerkb
Heap overflow in glibc 2.2 name resolution (CVE-2015-0235)
2015-01-28 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2015:0158-1)
2021-06-09 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-473)
2015-09-08 00:00:00
CentOS Update for glibc CESA-2015:0092 centos7
2015-01-28 00:00:00
exploitpack
exploitpack
Exim ESMTP 4.80 - glibc gethostbyname Denial of Service
2015-01-29 00:00:00
Exim - GHOST glibc gethostbyname Buffer Overflow (Metasploit)
2015-03-18 00:00:00
nvd
nvd
CVE-2015-0235
2015-01-28 19:59:00
metasploit
metasploit
WordPress XMLRPC GHOST Vulnerability Scanner
2015-01-30 14:29:51
Exim GHOST (glibc gethostbyname) Buffer Overflow
2015-03-18 23:51:16
altlinux
altlinux
Security fix for the ALT Linux 6 package glibc version 6:2.11.3-alt8.M60P.2
2015-01-28 00:00:00
Security fix for the ALT Linux 5 package glibc version 6:2.11.2-alt1.M51.2
2015-01-28 00:00:00
cvelist
cvelist
CVE-2015-0235
2015-01-28 19:00:00
ubuntucve
ubuntucve
CVE-2015-0235
2015-01-27 00:00:00
checkpoint_security
checkpoint_security
Check Point Response to CVE-2015-0235 (glibc - GHOST)
2015-01-26 22:00:00
lenovo
lenovo
osv
osv
eglibc - security update
2015-01-28 00:00:00
eglibc - security update
2015-01-27 00:00:00
freebsd
freebsd
glibc -- gethostbyname buffer overflow
2015-01-27 00:00:00
php5 -- multiple vulnerabilities
2015-02-18 00:00:00
prion
prion
Heap overflow
2015-01-28 19:59:00
thn
thn
Critical GHOST vulnerability affects most Linux Systems
2015-01-27 21:17:00
GHOST glibc Vulnerability Affects WordPress and PHP applications
2015-01-29 23:53:00
Critical glibc Flaw Puts Linux Machines and Apps at Risk (Patch Immediately)
2016-02-16 21:27:00
amazon
amazon
Critical: glibc
2015-01-27 11:41:00
Critical: php55
2015-03-23 08:29:00
Critical: php54
2015-03-13 10:00:00
redhat
redhat
(RHSA-2015:0099) Critical: glibc security update
2015-01-28 00:00:00
(RHSA-2015:0090) Critical: glibc security update
2015-01-27 00:00:00
(RHSA-2015:0092) Critical: glibc security update
2015-01-27 00:00:00
packetstorm
packetstorm
Exim GHOST (glibc gethostbyname) Buffer Overflow
2015-03-24 00:00:00
Exim ESMTP GHOST Denial Of Service
2015-01-29 00:00:00
Qualys Security Advisory - glibc gethostbyname Buffer Overflow
2015-01-27 00:00:00
securityvulns
securityvulns
debiancve
debiancve
CVE-2015-0235
2015-01-28 19:59:00
zdt
zdt
Exim GHOST (glibc gethostbyname) Buffer Overflow Exploit
2015-03-19 00:00:00
Exim ESMTP GHOST Denial Of Service Exploit
2015-01-29 00:00:00
threatpost
threatpost
Ghost glibc Vulnerability Patching and Exploits
2015-01-28 13:28:29
GHOST glibc Linux Remote Code Execution Vulnerability
2015-01-27 12:55:29
checkpoint_advisories
checkpoint_advisories
GNU C Library gethostbyname Buffer Overflow (CVE-2015-0235)
2015-01-28 00:00:00
ics
ics
centos
centos
glibc, nscd security update
2015-01-27 23:31:01
glibc, nscd security update
2015-01-27 22:59:55
slackware
slackware
[slackware-security] glibc
2015-01-28 20:35:21
ubuntu
ubuntu
GNU C Library vulnerability
2015-01-27 00:00:00
paloalto
paloalto
GHOST: glibc vulnerability
2015-02-02 08:00:00
cisa
cisa
Linux "Ghost" Remote Code Execution Vulnerability
2015-01-27 00:00:00
citrix
citrix
CVE-2015-0235 - Citrix Security Advisory for glibc GHOST Vulnerability
2015-01-28 04:00:00
suse
suse
Security update for glibc (critical)
2015-01-28 03:04:56
Security update for glibc (critical)
2015-02-02 09:04:48
glibc (critical)
2015-01-28 19:04:53
cve
cve
CVE-2015-0235
2015-01-28 19:59:00
oraclelinux
oraclelinux
glibc security update
2015-01-29 00:00:00
glibc security update
2015-01-27 00:00:00
glibc security update
2015-08-17 00:00:00
seebug
seebug
Linux glibc 缓冲区溢出
(幽灵(Ghost))
2015-07-02 00:00:00
cloudfoundry
cloudfoundry
CVE-2015-0235 - GHOST | Cloud Foundry
2015-01-28 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-01-15 09:04:16
arista
arista
Security Advisory 0009
2015-01-28 00:00:00
fortinet
fortinet
CVE-2015-0235 "GHOST" vulnerability
2015-01-28 00:00:00
vulnerlab
vulnerlab
Glibc Ghost Vulnerability (CVE-2015-0235) - How to Secure
2015-01-30 00:00:00
Glibc Ghost Vulnerability (CVE-2015-0235) - How to Secure
2015-01-30 00:00:00
cisco
cisco
GNU glibc gethostbyname Function Buffer Overflow Vulnerability
2015-01-28 22:30:00
exploitdb
exploitdb
Exim - 'GHOST' glibc gethostbyname Buffer Overflow (Metasploit)
2015-03-18 00:00:00
Exim ESMTP 4.80 - glibc gethostbyname Denial of Service
2015-01-29 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: php-5.6.6-1.fc21
2015-02-23 23:28:40
[SECURITY] Fedora 20 Update: php-5.5.22-1.fc20
2015-03-04 10:24:35
archlinux
archlinux
jasper: arbitrary code execution
2015-01-27 00:00:00
flashplugin: multiple issues
2015-01-23 00:00:00
gentoo
gentoo
GNU C Library: Multiple vulnerabilities
2015-03-08 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.975 High
EPSS
Percentile
100.0%
Related for HUAWEI-SA-20150226-01-GLIBC