CVE-2015-0235
- State
- Published
- Severity
- Not scored
- Published
- Jan 28, 2015
- Updated
- Aug 6, 2024
- Reserved
- Nov 18, 2014
Description
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 72325vdb-entry
- HPSBGN03247vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21696131
- 62883third-party-advisory
- 62691third-party-advisory
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
- APPLE-SA-2015-10-21-4vendor-advisory
- http://packetstormsecurity.com/files/130974/Exim-GHOST-glibc-gethostbyname-Buffer-Overflow.html
- https://support.apple.com/HT205375
- HPSBGN03285vendor-advisory
- 20150127 GHOST gethostbyname() heap overflow in glibc (CVE-2015-0235)mailing-list
- http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0
- 62698third-party-advisory
- 62640third-party-advisory
- 1032909vdb-entry
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- https://bto.bluecoat.com/security-advisory/sa90
- http://www-01.ibm.com/support/docview.wss?uid=swg21696618
- http://www-01.ibm.com/support/docview.wss?uid=swg21696600
- http://www.idirect.net/Partners/~/media/Files/CVE/iDirect-Posted-Common-Vulnerabilities-and-Exposures.pdf
- APPLE-SA-2015-09-30-3vendor-advisory
- http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
- https://www.sophos.com/en-us/support/knowledgebase/121879.aspx
- 62688third-party-advisory
- 62865third-party-advisory
- http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
- http://www-01.ibm.com/support/docview.wss?uid=swg21696243
- HPSBHF03289vendor-advisory
- APPLE-SA-2015-06-30-2vendor-advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10100
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- 62812third-party-advisory
- 62879third-party-advisory
- HPSBGN03270vendor-advisory
- http://linux.oracle.com/errata/ELSA-2015-0090.html
- http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
- 62871third-party-advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
- 62690third-party-advisory
- 62692third-party-advisory
- https://support.apple.com/HT205267
- https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes
- 62681third-party-advisory
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10671
- http://www-01.ibm.com/support/docview.wss?uid=swg21696526
- 62667third-party-advisory
- https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04874668
- MDVSA-2015:039vendor-advisory
- https://www.f-secure.com/en/web/labs_global/fsc-2015-1
- http://www-01.ibm.com/support/docview.wss?uid=swg21696602
- 62517third-party-advisory
- http://support.apple.com/kb/HT204942
- http://blogs.sophos.com/2015/01/29/sophos-products-and-the-ghost-vulnerability-affecting-linux/
- http://www-01.ibm.com/support/docview.wss?uid=swg21695695
- 62680third-party-advisory
- 62813third-party-advisory
- http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.html
- GLSA-201503-04vendor-advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- 20150128 GNU glibc gethostbyname Function Buffer Overflow Vulnerabilityvendor-advisory
- 91787vdb-entry
- http://packetstormsecurity.com/files/130171/Exim-ESMTP-GHOST-Denial-Of-Service.html
- RHSA-2015:0126vendor-advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
- 20150311 OpenSSL v1.0.2 for Linux affected by CVE-2015-0235mailing-list
- 62715third-party-advisory
- https://www.qualys.com/research/security-advisories/GHOST-CVE-2015-0235.txt
- http://www-01.ibm.com/support/docview.wss?uid=swg21695835
- 20150127 Qualys Security Advisory CVE-2015-0235 - GHOST: glibc gethostbyname buffer overflowmailing-list
- HPSBMU03330vendor-advisory
- 20150128 Qualys Security Advisory CVE-2015-0235 - GHOST: glibc gethostbyname buffer overflowmailing-list
- http://www-01.ibm.com/support/docview.wss?uid=swg21695774
- 62870third-party-advisory
- https://security.netapp.com/advisory/ntap-20150127-0001/
- http://linux.oracle.com/errata/ELSA-2015-0092.html
- http://www-01.ibm.com/support/docview.wss?uid=swg21695860
- DSA-3142vendor-advisory
- https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability
- 62816third-party-advisory
- 62758third-party-advisory
- 20190612 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Seriesmailing-list
- 20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Seriesmailing-list
- http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-994726.pdf
- [oss-security] 20210504 21Nails: Multiple vulnerabilities in Eximmailing-list
- 20210901 SEC Consult SA-20210901-0 :: Multiple vulnerabilities in MOXA devicesmailing-list
- http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html
- https://www.arista.com/en/support/advisories-notices/security-advisories/1053-security-advisory-9
- 20220617 SEC Consult SA-20220615-0 :: Hardcoded Backdoor User and Outdated Software Components in Nexans FTTO GigaSwitch seriesmailing-list
- http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.