Published: 27/06/2017 Updated: 13/02/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 446

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

res_query in libresolv in glibc prior to 2.25 allows remote malicious users to cause a denial of service (NULL pointer dereference and process crash).

Vulnerable Product	Search on Vulmon	Subscribe to Product
canonical ubuntu linux 12.04
canonical ubuntu linux 16.04
canonical ubuntu linux 14.04
gnu glibc

Synopsis Moderate: glibc security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for glibc is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System ...

Debian Bug report logs - #796106 CVE-2015-5180 Package: src:glibc; Maintainer for src:glibc is GNU Libc Maintainers <debian-glibc@listsdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Wed, 19 Aug 2015 14:06:02 UTC Severity: important Tags: fixed-upstream, security, upstream Found in version glibc ...

Several security issues were fixed in the GNU C Library ...

USN-3239-1 introduced a regression in the GNU C Library ...

Fragmentation attacks possible when EDNS0 is enabledThe DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 226, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation(CVE-2017-12132) Buffer overflow in glob with GLOB_TI ...

res_query in libresolv in glibc before 225 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) ...

CWE-476 https://sourceware.org/ml/libc-alpha/2017-02/msg00079.html https://sourceware.org/bugzilla/show_bug.cgi?id=18784 https://sourceware.org/bugzilla/attachment.cgi?id=8492 https://bugzilla.redhat.com/show_bug.cgi?id=1249603 http://www.ubuntu.com/usn/USN-3239-2 http://www.ubuntu.com/usn/USN-3239-1 https://security.gentoo.org/glsa/201706-19 http://www.securityfocus.com/bid/99324 https://access.redhat.com/errata/RHSA-2018:0805 https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=fc82b0a2dfe7dbd35671c10510a8da1043d746a5 https://access.redhat.com/errata/RHSA-2018:0805 https://nvd.nist.gov https://usn.ubuntu.com/3239-1/

CVE-2015-5180

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect