CVE-2015-0235

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x...

10.0 HighPublic exploitFix available

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

Exploit likelihood

94.6%Up 10.7 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Record: CVE-2015-0235
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-787
Updated: 2026-11-02

CVE List No score

Record: CVE-2015-0235
Updated: 2026-11-02

EUVDEUVD-2015-0257 No score

Record: EUVD-2015-0257
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jwcp-p679-fcr4 No score

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x...

Record: GHSA-jwcp-p679-fcr4
Weakness: CWE-787
Updated: 2026-11-02

OSVCLSA-2020-1605798462 No score

Fix of 227 CVE

Fix bug #69720: Null pointer dereference in phar_get_fp_offset()
Fix bug #70728: Type Confusion Vulnerability in PHP_to_XMLRPC_worker()
Fix bug #70661: Use After Free Vulnerability in WDDX Packet Deserialization
Fix bug #70741: Session WDDX Packet Deserialization Type Confusion Vulnerability
Fix bug #71459: Integer overflow in iptcembed()
Fix bug #71039: exec functions ignore length but look for NULL termination
Fix bug #71354: Heap corruption in tar/zip/phar parser.
Fix bug #71391: NULL Pointer Dereference in phar_tar_setupmetadata()
Fix bug #71323: Output of stream_get_meta_data can be falsified by its input
Fix bug #71498: Out-of-Bound Read in phar_parse_zipfile()
Fix bug #71587: Use-After-Free / Double-Free in WDDX Deserialize
Fix bug #71860: Invalid memory write in phar on filename with \0 in name
Fix bug #71798: Integer Overflow in php_raw_url_encode
Fix bug #72837: integer overflow in bzdecompress caused heap corruption
Fix bug #72681: PHP Session Data Injection Vulnerability
Fix bug #72807: integer overflow in curl_escape caused heap corruption
Fix bug #72838: Integer overflow lead to heap corruption in sql_regcase
Fix bug #72697: select_colors write out-of-bounds
Fix bug #72730: imagegammacorrect allows arbitrary write access
Fix bug #72836: integer overflow in base64_decode caused heap corruption
Fix bug #72848: integer overflow in quoted_printable_encode caused heap corruption
Fix bug #72849: integer overflow in urlencode caused heap corruption
Fix bug #72850: integer overflow in php_uuencode caused heap corruption
Fix bug #72771: ftps:// wrapper is vulnerable to protocol downgrade attack
Fix bug #72749: wddx_deserialize allows illegal memory access
Fix bug #72750: wddx_deserialize null dereference
Fix bug #72790: wddx_deserialize null dereference with invalid xml
Fix bug #72799: wddx_deserialize null dereference in php_wddx_pop_element
Fix bug #73189: Memcpy negative size parameter php_resolve_path
Fix bug #73150: missing NULL check in dom_document_save_html
Fix bug #73284: heap overflow in php_ereg_replace function
Fix bug #73218: stack-buffer-overflow through "ResourceBundle" methods
Fix bug #73208: integer overflow in imap_8bit caused heap corruption
Fix bug #73082: string length overflow in mb_encode_* function
Fix bug #73174: heap overflow in php_pcre_replace_impl
Fix bug #73276: crash in openssl_random_pseudo_bytes function
Fix bug #73275: crash in openssl_encrypt function
Fix bug #73017: memory corruption in wordwrap function
Fix bug #73240: Write out of bounds at number_format
Fix bug #73073: CachingIterator null dereference when convert to string
Fix bug #73293: NULL pointer dereference in SimpleXMLElement::asXML()
Fix bug #73356: crash in bzcompress function
Fix bug #72696: imagefilltoborder stackoverflow on truecolor images
Fix bug #73418: Integer Overflow in "_php_imap_mail" leads Heap Overflow
Fix bug #73144: Use-after-free in ArrayObject Deserialization
Fix bug #73192: parse_url return wrong hostname
Fix bug #73331: NULL Pointer Dereference in WDDX Packet Deserialization with PDORow
Fix bug #73452: Segfault (Regression for #69152)
Fix bug #73631: Invalid read when wddx decodes empty boolean element
Fix bug #67587: Redirection loop on nginx with FPM
Fix bug #71465: PHAR doesn't know about litespeed
Fix bug #73737: FPE when parsing a tag format
Fix bug #73868: Fix DOS vulnerability in gdImageCreateFromGd2Ctx()
Fix bug #73869: Signed Integer Overflow gd_io.c
Fix bug #73773: Seg fault when loading hostile phar
Fix bug #70436: Use After Free Vulnerability in unserialize()
Fix bug #74603: PHP INI Parsing Stack Buffer Overflow Vulnerability
Fix bug #72535: arcfour encryption stream filter crashes php
Fix bug #72434: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unseria
Fix bug #72455: Heap Overflow due to integer overflows
Fix bug #74782:…

Record: CLSA-2020-1605798462
Updated: 2026-11-02

OSV No score

Record: CVE-2015-0235
Updated: 2026-11-02

Show 9 moreShow less

OSVDEBIAN-CVE-2015-0235 No score

Record: DEBIAN-CVE-2015-0235
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10290-1 No score

apache2-mod_php7-7.0.14-1.4 on GA media

These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10290-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10344-1 No score

apache2-mod_php5-5.6.28-1.1 on GA media

These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10344-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:11169-1 No score

php8-8.0.11-1.1 on GA media

These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:11169-1
Updated: 2026-11-02

OSVSUSE-RU-2015:0794-1 No score

Security update for glibc

This glibc update fixes a critical privilege escalation problem and two non-security issues:

* bnc#892073: An off-by-one error leading to a heap-based buffer
  overflow was found in __gconv_translit_find(). An exploit that
  targets the problem is publicly available. (CVE-2014-5119)
* bnc#892065: setenv-alloca.patch: Avoid unbound alloca in setenv.
* bnc#888347: printf-multibyte-format.patch: Don't parse %s format
  argument as multi-byte string.

Security Issues:

* CVE-2014-5119
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5119>

Record: SUSE-RU-2015:0794-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0253-1 No score

Security update for glibc

This glibc update fixes a critical privilege escalation problem and two non-security issues:

* bnc#892073: An off-by-one error leading to a heap-based buffer
  overflow was found in __gconv_translit_find(). An exploit that
  targets the problem is publicly available. (CVE-2014-5119)
* bnc#892065: setenv-alloca.patch: Avoid unbound alloca in setenv.
* bnc#888347: printf-multibyte-format.patch: Don't parse %s format
  argument as multi-byte string.

Security Issues:

* CVE-2014-5119
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5119>

Record: SUSE-SU-2015:0253-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0439-1 No score

Security update for glibc

This glibc update fixes a critical privilege escalation problem and two non-security issues:

* bnc#892073: An off-by-one error leading to a heap-based buffer
  overflow was found in __gconv_translit_find(). An exploit that
  targets the problem is publicly available. (CVE-2014-5119)
* bnc#892065: setenv-alloca.patch: Avoid unbound alloca in setenv.
* bnc#888347: printf-multibyte-format.patch: Don't parse %s format
  argument as multi-byte string.

Security Issues:

* CVE-2014-5119
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5119>

Record: SUSE-SU-2015:0439-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0551-1 No score

Security update for glibc

This update for glibc contains the following fixes:

* Fix integer overflows in malloc (CVE-2013-4332, bnc#839870)
* Fix buffer overflow in glob (bnc#691365)
* Fix buffer overflow in strcoll (CVE-2012-4412, bnc#779320)
* Update mount flags in <sys/mount.h> (bnc#791928)
* Fix buffer overrun in regexp matcher (CVE-2013-0242, bnc#801246)
* Fix memory leaks in dlopen (bnc#811979)
* Fix stack overflow in getaddrinfo with many results (CVE-2013-1914,
  bnc#813121)
* Fix check for XEN build in glibc_post_upgrade that causes missing
  init re-exec (bnc#818628)
* Don't raise UNDERFLOW in tan/tanf for small but normal argument
  (bnc#819347)
* Properly cross page boundary in SSE4.2 implementation of strcmp
  (bnc#822210)
* Fix robust mutex handling after fork (bnc#827811)
* Fix missing character in IBM-943 charset (bnc#828235)
* Fix use of alloca in gaih_inet (bnc#828637)
* Initialize pointer guard also in static executables (CVE-2013-4788,
  bnc#830268)
* Fix readdir_r with long file names (CVE-2013-4237, bnc#834594).

Security Issues:

* CVE-2012-4412
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4412>
* CVE-2013-0242
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0242>
* CVE-2013-1914
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1914>
* CVE-2013-4237
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4237>
* CVE-2013-4332
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4332>
* CVE-2013-4788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4788>

Record: SUSE-SU-2015:0551-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2015-0235 No score

Record: UBUNTU-CVE-2015-0235
Updated: 2026-11-02

Affected products

Show 6 moreShow less

Affected packages

Affected packages
Package	Affected	Fixed
`php` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-bcmath` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-cli` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-common` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-dba` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-devel` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-embedded` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-enchant` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-fpm` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-gd` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux

Show 195 moreShow less

Affected packages
Package	Affected	Fixed
`php-imap` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-intl` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-ldap` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-mbstring` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-mysql` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-odbc` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-pdo` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-pgsql` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-process` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-pspell` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-recode` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-snmp` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-soap` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-tidy` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-xml` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-xmlrpc` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`php-zts` TuxCare:CentOS:6 From an advisory covering 70 CVEs	before 5.3.3-51.el6.cloudlinux	5.3.3-51.el6.cloudlinux
`glibc` Debian:12	before 2.18-1	2.18-1
`glibc` Debian:13	before 2.18-1	2.18-1
`glibc` Debian:14	before 2.18-1	2.18-1
`eglibc` Debian:6.0	before 2.11.3-4+deb6u4, plus listed versions 2.11.2-102.11.2-10+m68k.12.11.2-112.11.2-11+m68k.12.11.2-12 Show 5 moreShow less 2.11.2-132.11.3-12.11.3-22.11.3-32.11.3-4	2.11.3-4+deb6u4
`eglibc` Debian:7 From an advisory covering 4 CVEs	before 2.13-38+deb7u7, plus listed versions 2.13-382.13-38+deb7u12.13-38+deb7u22.13-38+deb7u32.13-38+deb7u42.13-38+deb7u52.13-38+deb7u6	2.13-38+deb7u7
`glibc` Red Hat:enterprise_linux:5::client	before 0:2.5-123.el5_11.1	0:2.5-123.el5_11.1
`glibc-common` Red Hat:enterprise_linux:5::client	before 0:2.5-123.el5_11.1	0:2.5-123.el5_11.1
`glibc-debuginfo` Red Hat:enterprise_linux:5::client	before 0:2.5-123.el5_11.1	0:2.5-123.el5_11.1
`glibc-debuginfo-common` Red Hat:enterprise_linux:5::client	before 0:2.5-123.el5_11.1	0:2.5-123.el5_11.1
`glibc-devel` Red Hat:enterprise_linux:5::client	before 0:2.5-123.el5_11.1	0:2.5-123.el5_11.1
`glibc-headers` Red Hat:enterprise_linux:5::client	before 0:2.5-123.el5_11.1	0:2.5-123.el5_11.1
`glibc-utils` Red Hat:enterprise_linux:5::client	before 0:2.5-123.el5_11.1	0:2.5-123.el5_11.1
`nscd` Red Hat:enterprise_linux:5::client	before 0:2.5-123.el5_11.1	0:2.5-123.el5_11.1
`glibc` Red Hat:enterprise_linux:5::server	before 0:2.5-123.el5_11.1	0:2.5-123.el5_11.1
`glibc-common` Red Hat:enterprise_linux:5::server	before 0:2.5-123.el5_11.1	0:2.5-123.el5_11.1
`glibc-debuginfo` Red Hat:enterprise_linux:5::server	before 0:2.5-123.el5_11.1	0:2.5-123.el5_11.1
`glibc-debuginfo-common` Red Hat:enterprise_linux:5::server	before 0:2.5-123.el5_11.1	0:2.5-123.el5_11.1
`glibc-devel` Red Hat:enterprise_linux:5::server	before 0:2.5-123.el5_11.1	0:2.5-123.el5_11.1
`glibc-headers` Red Hat:enterprise_linux:5::server	before 0:2.5-123.el5_11.1	0:2.5-123.el5_11.1
`glibc-utils` Red Hat:enterprise_linux:5::server	before 0:2.5-123.el5_11.1	0:2.5-123.el5_11.1
`nscd` Red Hat:enterprise_linux:5::server	before 0:2.5-123.el5_11.1	0:2.5-123.el5_11.1
`glibc` Red Hat:enterprise_linux:6::client	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-common` Red Hat:enterprise_linux:6::client	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-debuginfo` Red Hat:enterprise_linux:6::client	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-debuginfo-common` Red Hat:enterprise_linux:6::client	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-devel` Red Hat:enterprise_linux:6::client	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-headers` Red Hat:enterprise_linux:6::client	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-utils` Red Hat:enterprise_linux:6::client	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`nscd` Red Hat:enterprise_linux:6::client	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-static` Red Hat:enterprise_linux:6::client	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc` Red Hat:enterprise_linux:6::computenode	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-common` Red Hat:enterprise_linux:6::computenode	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-debuginfo-common` Red Hat:enterprise_linux:6::computenode	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-devel` Red Hat:enterprise_linux:6::computenode	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-headers` Red Hat:enterprise_linux:6::computenode	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-utils` Red Hat:enterprise_linux:6::computenode	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`nscd` Red Hat:enterprise_linux:6::computenode	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-static` Red Hat:enterprise_linux:6::computenode	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc` Red Hat:enterprise_linux:6::server	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-common` Red Hat:enterprise_linux:6::server	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-debuginfo` Red Hat:enterprise_linux:6::server	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-debuginfo-common` Red Hat:enterprise_linux:6::server	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-devel` Red Hat:enterprise_linux:6::server	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-headers` Red Hat:enterprise_linux:6::server	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-utils` Red Hat:enterprise_linux:6::server	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`nscd` Red Hat:enterprise_linux:6::server	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-static` Red Hat:enterprise_linux:6::server	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc` Red Hat:enterprise_linux:6::workstation	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-common` Red Hat:enterprise_linux:6::workstation	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-debuginfo-common` Red Hat:enterprise_linux:6::workstation	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-devel` Red Hat:enterprise_linux:6::workstation	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-headers` Red Hat:enterprise_linux:6::workstation	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-utils` Red Hat:enterprise_linux:6::workstation	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`nscd` Red Hat:enterprise_linux:6::workstation	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc-static` Red Hat:enterprise_linux:6::workstation	before 0:2.12-1.149.el6_6.5	0:2.12-1.149.el6_6.5
`glibc` Red Hat:enterprise_linux:7::client	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-common` Red Hat:enterprise_linux:7::client	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-debuginfo` Red Hat:enterprise_linux:7::client	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-debuginfo-common` Red Hat:enterprise_linux:7::client	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-devel` Red Hat:enterprise_linux:7::client	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-headers` Red Hat:enterprise_linux:7::client	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-utils` Red Hat:enterprise_linux:7::client	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`nscd` Red Hat:enterprise_linux:7::client	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-static` Red Hat:enterprise_linux:7::client	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc` Red Hat:enterprise_linux:7::computenode	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-common` Red Hat:enterprise_linux:7::computenode	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-debuginfo-common` Red Hat:enterprise_linux:7::computenode	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-devel` Red Hat:enterprise_linux:7::computenode	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-headers` Red Hat:enterprise_linux:7::computenode	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-utils` Red Hat:enterprise_linux:7::computenode	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`nscd` Red Hat:enterprise_linux:7::computenode	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-static` Red Hat:enterprise_linux:7::computenode	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc` Red Hat:enterprise_linux:7::server	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-common` Red Hat:enterprise_linux:7::server	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-debuginfo` Red Hat:enterprise_linux:7::server	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-debuginfo-common` Red Hat:enterprise_linux:7::server	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-devel` Red Hat:enterprise_linux:7::server	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-headers` Red Hat:enterprise_linux:7::server	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-utils` Red Hat:enterprise_linux:7::server	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`nscd` Red Hat:enterprise_linux:7::server	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-static` Red Hat:enterprise_linux:7::server	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc` Red Hat:enterprise_linux:7::workstation	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-common` Red Hat:enterprise_linux:7::workstation	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-debuginfo` Red Hat:enterprise_linux:7::workstation	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-debuginfo-common` Red Hat:enterprise_linux:7::workstation	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-devel` Red Hat:enterprise_linux:7::workstation	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-headers` Red Hat:enterprise_linux:7::workstation	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-utils` Red Hat:enterprise_linux:7::workstation	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`nscd` Red Hat:enterprise_linux:7::workstation	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc-static` Red Hat:enterprise_linux:7::workstation	before 0:2.17-55.el7_0.5	0:2.17-55.el7_0.5
`glibc` Red Hat:rhel_mission_critical:5.6	before 0:2.5-58.el5_6.6	0:2.5-58.el5_6.6
`glibc-common` Red Hat:rhel_mission_critical:5.6	before 0:2.5-58.el5_6.6	0:2.5-58.el5_6.6
`glibc-debuginfo` Red Hat:rhel_mission_critical:5.6	before 0:2.5-58.el5_6.6	0:2.5-58.el5_6.6
`glibc-debuginfo-common` Red Hat:rhel_mission_critical:5.6	before 0:2.5-58.el5_6.6	0:2.5-58.el5_6.6
`glibc-devel` Red Hat:rhel_mission_critical:5.6	before 0:2.5-58.el5_6.6	0:2.5-58.el5_6.6
`glibc-headers` Red Hat:rhel_mission_critical:5.6	before 0:2.5-58.el5_6.6	0:2.5-58.el5_6.6
`glibc-utils` Red Hat:rhel_mission_critical:5.6	before 0:2.5-58.el5_6.6	0:2.5-58.el5_6.6
`nscd` Red Hat:rhel_mission_critical:5.6	before 0:2.5-58.el5_6.6	0:2.5-58.el5_6.6
`glibc` Red Hat:rhel_eus:5.9	before 0:2.5-107.el5_9.8	0:2.5-107.el5_9.8
`glibc-common` Red Hat:rhel_eus:5.9	before 0:2.5-107.el5_9.8	0:2.5-107.el5_9.8
`glibc-debuginfo` Red Hat:rhel_eus:5.9	before 0:2.5-107.el5_9.8	0:2.5-107.el5_9.8
`glibc-debuginfo-common` Red Hat:rhel_eus:5.9	before 0:2.5-107.el5_9.8	0:2.5-107.el5_9.8
`glibc-devel` Red Hat:rhel_eus:5.9	before 0:2.5-107.el5_9.8	0:2.5-107.el5_9.8
`glibc-headers` Red Hat:rhel_eus:5.9	before 0:2.5-107.el5_9.8	0:2.5-107.el5_9.8
`glibc-utils` Red Hat:rhel_eus:5.9	before 0:2.5-107.el5_9.8	0:2.5-107.el5_9.8
`nscd` Red Hat:rhel_eus:5.9	before 0:2.5-107.el5_9.8	0:2.5-107.el5_9.8
`glibc` Red Hat:rhel_eus:6.4::computenode	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`glibc-common` Red Hat:rhel_eus:6.4::computenode	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`glibc-debuginfo` Red Hat:rhel_eus:6.4::computenode	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`glibc-debuginfo-common` Red Hat:rhel_eus:6.4::computenode	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`glibc-devel` Red Hat:rhel_eus:6.4::computenode	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`glibc-headers` Red Hat:rhel_eus:6.4::computenode	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`glibc-utils` Red Hat:rhel_eus:6.4::computenode	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`nscd` Red Hat:rhel_eus:6.4::computenode	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`glibc` Red Hat:rhel_eus:6.5::computenode	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`glibc-common` Red Hat:rhel_eus:6.5::computenode	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`glibc-debuginfo` Red Hat:rhel_eus:6.5::computenode	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`glibc-debuginfo-common` Red Hat:rhel_eus:6.5::computenode	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`glibc-devel` Red Hat:rhel_eus:6.5::computenode	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`glibc-headers` Red Hat:rhel_eus:6.5::computenode	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`glibc-utils` Red Hat:rhel_eus:6.5::computenode	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`nscd` Red Hat:rhel_eus:6.5::computenode	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`glibc-static` Red Hat:rhel_eus:6.4::computenode	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`glibc-static` Red Hat:rhel_eus:6.5::computenode	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`glibc` Red Hat:rhel_mission_critical:6.2::server	before 0:2.12-1.47.el6_2.15	0:2.12-1.47.el6_2.15
`glibc-common` Red Hat:rhel_mission_critical:6.2::server	before 0:2.12-1.47.el6_2.15	0:2.12-1.47.el6_2.15
`glibc-debuginfo` Red Hat:rhel_mission_critical:6.2::server	before 0:2.12-1.47.el6_2.15	0:2.12-1.47.el6_2.15
`glibc-debuginfo-common` Red Hat:rhel_mission_critical:6.2::server	before 0:2.12-1.47.el6_2.15	0:2.12-1.47.el6_2.15
`glibc-devel` Red Hat:rhel_mission_critical:6.2::server	before 0:2.12-1.47.el6_2.15	0:2.12-1.47.el6_2.15
`glibc-headers` Red Hat:rhel_mission_critical:6.2::server	before 0:2.12-1.47.el6_2.15	0:2.12-1.47.el6_2.15
`glibc-utils` Red Hat:rhel_mission_critical:6.2::server	before 0:2.12-1.47.el6_2.15	0:2.12-1.47.el6_2.15
`nscd` Red Hat:rhel_mission_critical:6.2::server	before 0:2.12-1.47.el6_2.15	0:2.12-1.47.el6_2.15
`glibc` Red Hat:rhel_eus:6.4::server	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`glibc-common` Red Hat:rhel_eus:6.4::server	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`glibc-debuginfo` Red Hat:rhel_eus:6.4::server	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`glibc-debuginfo-common` Red Hat:rhel_eus:6.4::server	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`glibc-devel` Red Hat:rhel_eus:6.4::server	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`glibc-headers` Red Hat:rhel_eus:6.4::server	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`glibc-utils` Red Hat:rhel_eus:6.4::server	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`nscd` Red Hat:rhel_eus:6.4::server	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`glibc` Red Hat:rhel_eus:6.5::server	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`glibc-common` Red Hat:rhel_eus:6.5::server	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`glibc-debuginfo` Red Hat:rhel_eus:6.5::server	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`glibc-debuginfo-common` Red Hat:rhel_eus:6.5::server	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`glibc-devel` Red Hat:rhel_eus:6.5::server	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`glibc-headers` Red Hat:rhel_eus:6.5::server	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`glibc-utils` Red Hat:rhel_eus:6.5::server	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`nscd` Red Hat:rhel_eus:6.5::server	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`glibc-static` Red Hat:rhel_mission_critical:6.2::server	before 0:2.12-1.47.el6_2.15	0:2.12-1.47.el6_2.15
`glibc-static` Red Hat:rhel_eus:6.4::server	before 0:2.12-1.107.el6_4.7	0:2.12-1.107.el6_4.7
`glibc-static` Red Hat:rhel_eus:6.5::server	before 0:2.12-1.132.el6_5.5	0:2.12-1.132.el6_5.5
`glibc` Red Hat:rhel_els:4::as	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`glibc-common` Red Hat:rhel_els:4::as	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`glibc-debuginfo` Red Hat:rhel_els:4::as	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`glibc-debuginfo-common` Red Hat:rhel_els:4::as	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`glibc-devel` Red Hat:rhel_els:4::as	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`glibc-headers` Red Hat:rhel_els:4::as	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`glibc-profile` Red Hat:rhel_els:4::as	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`glibc-utils` Red Hat:rhel_els:4::as	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`nptl-devel` Red Hat:rhel_els:4::as	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`nscd` Red Hat:rhel_els:4::as	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`glibc` Red Hat:rhel_els:4::es	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`glibc-common` Red Hat:rhel_els:4::es	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`glibc-debuginfo` Red Hat:rhel_els:4::es	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`glibc-debuginfo-common` Red Hat:rhel_els:4::es	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`glibc-devel` Red Hat:rhel_els:4::es	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`glibc-headers` Red Hat:rhel_els:4::es	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`glibc-profile` Red Hat:rhel_els:4::es	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`glibc-utils` Red Hat:rhel_els:4::es	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`nptl-devel` Red Hat:rhel_els:4::es	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`nscd` Red Hat:rhel_els:4::es	before 0:2.3.4-2.57.el4.2	0:2.3.4-2.57.el4.2
`rhev-hypervisor6` Red Hat:enterprise_linux:6::hypervisor From an advisory covering 6 CVEs	before 0:6.6-20150123.1.el6ev	0:6.6-20150123.1.el6ev
`php7` openSUSE:Tumbleweed From an advisory covering 70 CVEs	before 7.0.14-1.4	7.0.14-1.4
`php5` openSUSE:Tumbleweed From an advisory covering 71 CVEs	before 5.6.28-1.1	5.6.28-1.1
`php8` openSUSE:Tumbleweed From an advisory covering 97 CVEs	before 8.0.11-1.1	8.0.11-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
PoC in GitHub	aaronfay/CVE-2015-0235-test	2015-01-27
Metasploit	Exim GHOST (glibc gethostbyname) Buffer Overflow	2015-01-27
PoC in GitHub	fser/ghost-checker	2015-01-27
PoC in GitHub	mikesplain/CVE-2015-0235-cookbook	2015-01-27
PoC in GitHub	adherzog/ansible-CVE-2015-0235-GHOST	2015-01-28
PoC in GitHub	favoretti/lenny-libc6	2015-01-28
PoC in GitHub	furyutei/CVE-2015-0235_GHOST	2015-01-28
Exploit-DB	Exim ESMTP 4.80 - glibc gethostbyname Denial of Service	2015-01-29
PoC in GitHub	F88/ghostbusters15	2015-01-29
PoC in GitHub	koudaiii-archives/cookbook-update-glibc	2015-01-29

Show 10 moreShow less

Public exploits
Source	Link	Date
PoC in GitHub	nickanderson/cfengine-CVE_2015_0235	2015-01-29
PoC in GitHub	tobyzxj/CVE-2015-0235	2015-01-30
PoC in GitHub	makelinux/CVE-2015-0235-workaround	2015-02-02
Exploit-DB	Exim - 'GHOST' glibc gethostbyname Buffer Overflow (Metasploit)	2015-03-18
PoC in GitHub	arm13/ghost_exploit	2015-03-28
PoC in GitHub	alanmeyer/CVE-glibc	2016-02-25
PoC in GitHub	1and1-serversupport/ghosttester	2016-03-07
PoC in GitHub	sUbc0ol/CVE-2015-0235	2017-06-30
PoC in GitHub	chayim/GHOSTCHECK-cve-2015-0235	2020-03-24
Metasploit	WordPress XMLRPC GHOST Vulnerability Scanner

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, exploits, facts
Nov 3, 2026	affected, exploits
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-0235 is a high vulnerability (CVSS 10.0) in Gnu Glibc, published September 13, 2013. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 94.6%, the 99th percentile. Fixed in glibc 2.18-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 143 references and the rest of 1 source description. The JSON record has them.