Stack-based buffer overflow in GNU C Library (glibc) - CVE-2015-7547

Vulnerability identifier: #VU2544

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2015-7547

CWE-ID: CWE-121

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The weakness exists due to stack-based buffer overflow in in the (1) send_dg and (2) send_vc functions in the libresolv library. A remote attacker can use a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module, cause memory corruption and execute arbitrary code.

Successful exploitation of the vulnerability may result in system compromise.

GNU C Library (glibc)
Amazon Linux AMI
Gentoo Linux
HPE Helion Openstack
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux EUS Compute Node
Slackware Linux
Fedora
NonStop Virtual TapeServer (VTS)
Helion Eucalyptus Node Controller
Helion CloudSystem
Integrated Management Module II (IMM2)
IBM System Storage TS4500 Tape Library
Helion Eucalyptus Service EMI
Helion Development Platform
HPE OneView
3PAR OS
XIV Gen3
Cloud Optimizer
Red Hat Virtualization
IBM BladeCenter Advanced Management Module
sys-libs/glibc
glibc

Update to version 2.23.

GNU C Library (glibc) - update to 2.23
HPE Helion Openstack - update to 2.1.2
Helion CloudSystem - addressed in versions 8.1.3, 9.0.2
IBM BladeCenter Advanced Management Module - update to BPET66U-3.66u
Integrated Management Module II (IMM2) - update to 1aoo72h-5.60
IBM System Storage TS4500 Tape Library - update to 1.2.0.3
Helion Eucalyptus Service EMI - update to 1.57-0.93.110.el6
Helion Development Platform - update to 2.0.2
HPE OneView - update to 2.00.07
sys-libs/glibc - update to 2.21-r2
glibc - addressed in versions 2.21-11.fc22, 2.22-6.fc23, 2.22-9.fc23
3PAR OS - addressed in versions 3.2.1 MU5, 3.2.2 MU2
XIV Gen3 - addressed in versions 11.5.2.a, 11.6.1.a

• Exploit #2645 - Glibc-Vulnerability-Exploit-CVE-2015-7547 (Glibc-Vulnerability-Exploit-CVE-2015-7547) (May 12, 2020)
• Exploit #2532 - glibc - 'getaddrinfo' Stack Based Buffer Overflow (PoC) (April 7, 2020)
• Exploit #2438 - glibc - 'getaddrinfo' Stack Based Buffer Overflow (April 7, 2020)
• Exploit #2271 - cve-2015-7547 (PoC exploit server for CVE-2015-7547) (April 7, 2020)
• Exploit #2046 - glibc-exploit---CVE-2015-7547 (CVE-2015-7547 initial research.) (March 18, 2020)

• https://sourceware.org/bugzilla/show_bug.cgi?id=18665

• Amazon Linux AMI update for glibc
• Slackware Linux update for glibc
• Red Hat update for rhev-hypervisor
• Red Hat update for glibc
• Stack-based buffer overflow in HPE Cloud Optimizer (Virtualization Performance Viewer)
• Stack-based buffer overflow in HPE Helion Development Platform
• Stack-based buffer overflow in HPE Helion CloudSystem
• Stack-based buffer overflow in HPE Helion Eucalyptus Node Controller and other Helion Eucalyptus Components using glibc
• Stack-based buffer overflow in HP Helion OpenStack
• Multiple vulnerabilities in HPE NonStop Virtual TapeServer (VTS)
• Stack-based buffer overflow in HPE 3PAR OS
• Stack-based buffer overflow in IBM Integrated Management Module II (IMM2)
• IBM TS4500 firmware update for GNU C library
• Stack-based buffer overflow in IBM XIV Storage System
• Multiple vulnerabilities in HP OneView Products using glibc and OpenSSL
• Fedora 23 update for glibc
• Gentoo update for GNU C Library
• Fedora 23 update for glibc
• Fedora 22 update for glibc
• Multiple vulnerabilities in IBM BladeCenter Advanced Management Module (AMM)