What’s Vulnerable › Vulnerabilities
CVE-2015-7547
- Severity: high (CVSS 8.1 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 91.0% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2016-02-18 · updated 2026-06-17
- Weakness: CWE-119
Description
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.
Affected products
- Canonical Ubuntu Linux: 12.04, 14.04, 15.10
- Debian Linux: 8.0
- F5 BIG-IP APM: 12.0.0
- BIG-IP: 12.0.0
- F5 Big-Ip Analytics: 12.0.0
- F5 Networks, Inc. BIG-IP (AAM): 12.0.0
- BIG-IP ASM: 12.0.0
- F5 BIG-IP DNS: 12.0.0
- F5 Big-Ip Link Controller: 12.0.0
- F5 BIG-IP (LTM): 12.0.0
- F5 Networks, Inc. BIG-IP (PEM): 12.0.0
- GNU C Library (glibc): 2.9, 2.10, 2.10.1, 2.11, 2.11.1, 2.11.2 (+15)
- HP Helion Openstack: 1.1.1, 2.0.0, 2.1.0
- HP Server Migration Pack: 7.5
- Opensuse: 13.2
- Oracle Exalogic Infrastructure: 1.0, 2.0
- Oracle Fujitsu M10 Firmware: through 2290
- RedHat Enterprise Linux Desktop: 7.0
- RedHat Enterprise Linux Hpc Node: 7.0
- RedHat Enterprise Linux Hpc Node Eus: 7.2
- RedHat Enterprise Linux Server: 7.0
- RedHat Enterprise Linux Server Aus: 7.2
- RedHat Enterprise Linux Server Eus: 7.2
- RedHat Enterprise Linux Workstation: 7.0
- Sophos Unified Threat Management Software: 9.319, 9.355
- SUSE Linux Enterprise Debuginfo: 11.0-sp2, 11.0-sp3, 11.0-sp4
- SUSE Linux Enterprise Server 15 SP1: 11.0-sp3, 11.0-sp4, 12, 12-sp1
- SUSE Linux Enterprise Server: 11.0-sp2, 11.0-sp3, 11.0-sp4, 12-sp1
- SUSE Linux Enterprise Software Development Kit: 11.0-sp3, 11.0-sp4, 12, 12-sp1
- SUSE Linux Enterprise: 12
References
- http://fortiguard.com/advisory/glibc-getaddrinfo-stack-overflow
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177412.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00043.html
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00044.html
- http://marc.info/?l=bugtraq&m=145596041017029&w=2
- http://marc.info/?l=bugtraq&m=145672440608228&w=2
Get alerted when CVE-2015-7547 or the next vulnerability affects your stack