NetSight
IP …
critical10.0Public exploit code

CVE-2015-0235

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to e…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

Affected products

VendorProductAffected versions
GnuGlibc
from 2.0 before 2.18
OracleCommunications Application Session Controller
before 3.7.1
OracleCommunications Eagle Application Processor
Version 16.0
OracleCommunications Eagle Lnp Application Processor
Version 10.0
OracleCommunications Lsms
Version 13.1
OracleCommunications Policy Management
Versions 9.7.3, 9.9.1, 10.4.1, 11.5, 12.1.1
OracleCommunications Session Border Controller
before 7.2.0
Versions 7.2.0, 8.0.0
OracleCommunications User Data Repository
from 10.0.0 through 10.0.1
OracleCommunications Webrtc Session Controller
Versions 7.0, 7.1, 7.2
OracleExalogic Infrastructure
Versions 1.0, 2.0
OracleVm Virtualbox
before 5.1.24
OracleLinux
Versions 5, 7

Weakness classification

CWE-787

References