Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer.
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html
http://www.debian.org/security/2016/dsa-3480
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
http://www.securityfocus.com/bid/74255
http://www.securitytracker.com/id/1032178
http://www.ubuntu.com/usn/USN-2985-1
http://www.ubuntu.com/usn/USN-2985-2
https://rhn.redhat.com/errata/RHSA-2015-0863.html
https://security.gentoo.org/glsa/201602-02
https://sourceware.org/bugzilla/show_bug.cgi?id=18287
https://sourceware.org/git/?p=glibc.git;a=commit;h=2959eda9272a03386
https://www.sourceware.org/ml/libc-alpha/2015-08/msg00609.html
OR
cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*
cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp4:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*
OR
cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:* versions up to 2.21 (inclusive)
OR
OR
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
ID | Name | Product | Family | Severity |
---|---|---|---|---|
125005 | EulerOS Virtualization 3.0.1.0 : glibc (EulerOS-SA-2019-1552) | Nessus | Huawei Local Security Checks | high |
91341 | Ubuntu 12.04 LTS / 14.04 LTS / 15.10 : eglibc, glibc regression (USN-2985-2) | Nessus | Ubuntu Local Security Checks | high |
91334 | Ubuntu 12.04 LTS / 14.04 LTS / 15.10 : eglibc, glibc vulnerabilities (USN-2985-1) | Nessus | Ubuntu Local Security Checks | high |
89473 | Fedora 22 : glibc-2.21-11.fc22 (2016-0480defc94) | Nessus | Fedora Local Security Checks | critical |
88831 | SUSE SLES11 Security Update : glibc (SUSE-SU-2016:0470-1) | Nessus | SuSE Local Security Checks | critical |
88822 | GLSA-201602-02 : GNU C Library: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | critical |
88783 | OracleVM 3.3 : glibc (OVMSA-2016-0013) (GHOST) | Nessus | OracleVM Local Security Checks | critical |
88767 | Debian DSA-3480-1 : eglibc - security update | Nessus | Debian Local Security Checks | critical |
88573 | RHEL 7 : glibc (RHSA-2015:2589) | Nessus | Red Hat Local Security Checks | high |
87556 | Scientific Linux Security Update : glibc on SL7.x x86_64 (20151119) | Nessus | Scientific Linux Local Security Checks | high |
87343 | Amazon Linux AMI : glibc (ALAS-2015-617) | Nessus | Amazon Linux Local Security Checks | high |
87142 | CentOS 7 : glibc (CESA-2015:2199) | Nessus | CentOS Local Security Checks | high |
87092 | Oracle Linux 7 : glibc (ELSA-2015-2199) | Nessus | Oracle Linux Local Security Checks | high |
86937 | RHEL 7 : glibc (RHSA-2015:2199) | Nessus | Red Hat Local Security Checks | high |
86696 | SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2015:1844-1) | Nessus | SuSE Local Security Checks | medium |
85624 | SUSE SLED11 / SLES11 Security Update : glibc (SUSE-SU-2015:1424-1) | Nessus | SuSE Local Security Checks | medium |
83867 | openSUSE Security Update : glibc / glibc-testsuite / glibc-utils / etc (openSUSE-2015-383) | Nessus | SuSE Local Security Checks | medium |
83865 | Debian DLA-230-1 : eglibc security update | Nessus | Debian Local Security Checks | medium |
83170 | Mandriva Linux Security Advisory : glibc (MDVSA-2015:218) | Nessus | Mandriva Local Security Checks | medium |
83056 | Amazon Linux AMI : glibc (ALAS-2015-513) | Nessus | Amazon Linux Local Security Checks | medium |
82987 | Scientific Linux Security Update : glibc on SL6.x i386/x86_64 (20150421) | Nessus | Scientific Linux Local Security Checks | medium |
82984 | RHEL 6 : glibc (RHSA-2015:0863) | Nessus | Red Hat Local Security Checks | medium |
82983 | OracleVM 3.3 : glibc (OVMSA-2015-0055) | Nessus | OracleVM Local Security Checks | medium |
82980 | Oracle Linux 6 : glibc (ELSA-2015-0863) | Nessus | Oracle Linux Local Security Checks | medium |
82928 | CentOS 6 : glibc (CESA-2015:0863) | Nessus | CentOS Local Security Checks | medium |