NetSight
IP …
medium6.8

CVE-2015-1781

Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attac…

Impact

Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer.

Affected products

VendorProductAffected versions
SuseLinux Enterprise Debuginfo
Version 11
SuseLinux Enterprise Desktop
Version 11
SuseLinux Enterprise Server
Version 11
GnuGlibc
through 2.21
DebianDebian Linux
Version 7.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.04

Weakness classification

CWE-119

References