NULL pointer dereference in GNU C Library (glibc) - CVE-2015-5180

Vulnerability identifier: #VU12269

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2015-5180

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists in res_query in libresolv due to NULL pointer dereference. A remote attacker can cause the service to crash.

GNU C Library (glibc)
Amazon Linux AMI
Gentoo Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power
SUSE Linux Enterprise Server
Fedora
Red Hat Virtualization Host
Dynamic System Analysis (DSA) Preboot
EMC Atmos
Flex System Chassis Management Module (CMM)
glibc-i18ndata
nscd-debuginfo
nscd
glibc-profile-32bit
glibc-profile
glibc-locale-debuginfo-32bit
glibc-locale-debuginfo
glibc-locale-32bit
glibc-locale
glibc-devel-debuginfo-32bit
glibc-devel-debuginfo
glibc-devel-32bit
glibc-devel
glibc-debugsource
glibc-debuginfo-32bit
glibc-debuginfo
glibc-32bit
glibc
glibc-info
glibc-html
Dell EMC Unisphere Central

Update to version 2.25.

Dynamic System Analysis (DSA) Preboot - update to dsyte2z-9.65
Flex System Chassis Management Module (CMM) - update to 2pet18a-2.5.14a
EMC Atmos - addressed in versions 2.4.2 HF504, 2.4.3 HF504
glibc-i18ndata - update to 2.22-126.1
nscd-debuginfo - update to 2.22-126.1
nscd - update to 2.22-126.1
glibc-profile-32bit - update to 2.22-126.1
glibc-profile - update to 2.22-126.1
glibc-locale-debuginfo-32bit - update to 2.22-126.1
glibc-locale-debuginfo - update to 2.22-126.1
glibc-locale-32bit - update to 2.22-126.1
glibc-locale - update to 2.22-126.1
glibc-devel-debuginfo-32bit - update to 2.22-126.1
glibc-devel-debuginfo - update to 2.22-126.1
glibc-devel-32bit - update to 2.22-126.1
glibc-devel - update to 2.22-126.1
glibc-debugsource - update to 2.22-126.1
glibc-debuginfo-32bit - update to 2.22-126.1
glibc-debuginfo - update to 2.22-126.1
glibc-32bit - update to 2.22-126.1
glibc - update to 2.22-126.1
glibc-info - update to 2.22-126.1
glibc-html - update to 2.22-126.1
glibc - update to 2.25-12.fc26
Dell EMC Unisphere Central - update to 4.0.8.23220

• https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=fc82b0a2dfe7dbd35671c10510a8da1043d746a5

• Denial of service in GNU Glibc
• Amazon Linux AMI update for glibc
• Red Hat update for glibc
• Gentoo update for GNU C Library
• SUSE update for glibc
• Multiple vulnerabilities in Dell EMC Unisphere Central
• Multiple vulnerabilities in Dell EMC Atmos
• Multiple vulnerabilities in IBM Dynamic System Analysis (DSA) Preboot
• Multiple vulnerabilities in IBM Flex System Chassis Management Module (CMM)
• Fedora 26 update for glibc