Out-of-bounds write in Glibc - CVE-2015-0235

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU84832

Out-of-bounds write in Glibc - CVE-2015-0235

Published: December 28, 2023


Vulnerability identifier: #VU84832
CSH Severity: High
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2015-0235
CWE-ID: CWE-787
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Glibc
Software vendor:
GNU

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc. A remote attacker can execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability..

External links