Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-5277
HistoryDec 17, 2015 - 7:59 p.m.

CVE-2015-5277

2015-12-1719:59:02
CWE-119
[email protected]
web.nvd.nist.gov
1

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON

The get_contents function in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) before 2.20 might allow local users to cause a denial of service (heap corruption) or gain privileges via a long line in the NSS files database.

Affected configurations

NVD
Node
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_hpc_nodeMatch7.0
OR
redhatenterprise_linux_serverMatch7.0
OR
redhatenterprise_linux_workstationMatch7.0
Node
gnuglibcRange≤2.19
Node
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch15.10

Related

cve 1
openvas 7
nessus 10
redhat 2
cvelist 1
oraclelinux 1
ibm 4
centos 1
ubuntucve 1
prion 1
debiancve 1
amazon 1
gentoo 1
ubuntu 2
cloudfoundry 1
packetstorm 1
cve
cve
CVE-2015-5277
2015-12-17 19:59:02
openvas
openvas
Oracle: Security Advisory (ELSA-2015-2172)
2015-11-27 00:00:00
RedHat Update for glibc RHSA-2015:2172-01
2015-11-20 00:00:00
RedHat Update for glibc RHSA-2016:2573-02
2016-11-04 00:00:00
nessus
nessus
CentOS 7 : glibc (CESA-2015:2172)
2015-12-02 00:00:00
Scientific Linux Security Update : glibc on SL7.x x86_64_important (20151119)
2015-12-29 00:00:00
Oracle Linux 7 : glibc (ELSA-2015-2172)
2015-11-30 00:00:00
redhat
redhat
(RHSA-2015:2172) Important: glibc security update
2015-11-19 15:39:46
(RHSA-2015:2589) Important: glibc security update
2015-12-09 08:43:11
cvelist
cvelist
CVE-2015-5277
2015-12-17 19:00:00
oraclelinux
oraclelinux
glibc security update
2015-11-25 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in Open Source GNU glibc affects IBM OS Images for Red Hat Linux Systems. (CVE-2015-5277)
2018-06-15 07:05:57
Security Bulletin: Vulnerability in GNU C Library affects IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch firmware (CVE-2015-5277)
2019-01-31 02:25:02
Security Bulletin: Multiple vulnerabilities in the GNU C Library (glibc) affect PowerKVM
2018-06-18 01:30:38
centos
centos
glibc, nscd security update
2015-12-01 22:24:31
ubuntucve
ubuntucve
CVE-2015-5277
2015-12-17 00:00:00
prion
prion
Heap overflow
2015-12-17 19:59:00
debiancve
debiancve
CVE-2015-5277
2015-12-17 19:59:02
amazon
amazon
Important: glibc
2015-12-14 10:00:00
gentoo
gentoo
GNU C Library: Multiple vulnerabilities
2017-02-19 00:00:00
ubuntu
ubuntu
GNU C Library vulnerabilities
2016-05-25 00:00:00
GNU C Library regression
2016-05-26 00:00:00
cloudfoundry
cloudfoundry
USN-2985-2 GNU C Library regression | Cloud Foundry
2016-06-13 00:00:00
packetstorm
packetstorm
Cisco Device Hardcoded Credentials / GNU glibc / BusyBox
2019-09-04 00:00:00

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON
Related for NVD:CVE-2015-5277
cve1openvas7nessus10redhat2cvelist1oraclelinux1ibm4centos1ubuntucve1prion1debiancve1amazon1gentoo1ubuntu2cloudfoundry1packetstorm1