Every CVESearch/Get API key

CVE-2015-0235

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x...

10.0 HighPublic exploitFix available

CVE-2015-0235 is a high vulnerability (CVSS 10.0) in Gnu Glibc, published September 13, 2013. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 94.6%, the 99th percentile. Fixed in glibc 2.18-1.

What does this mean?
Severity
10.0 HighCVSS 2.0, NVD
Exploit chance
94.6%EPSS, 99th percentile
Exploitation
None known20 public exploits
Fixed in
2.18-1glibc +204 more

Description

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

Exploit likelihood

94.6%Up 10.7 points since Feb 4, 2022
90%50%10%1%

Affected products

Show 6 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
php
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-bcmath
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-cli
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-common
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-dba
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-devel
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-embedded
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-enchant
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-fpm
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-gd
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
Show 195 moreShow less
Affected packages
PackageAffectedFixed
php-imap
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-intl
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-ldap
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-mbstring
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-mysql
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-odbc
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-pdo
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-pgsql
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-process
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-pspell
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-recode
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-snmp
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-soap
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-tidy
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-xml
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-xmlrpc
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
php-zts
TuxCare:CentOS:6
From an advisory covering 70 CVEs
before 5.3.3-51.el6.cloudlinux
5.3.3-51.el6.cloudlinux
glibc
Debian:12
before 2.18-1
2.18-1
glibc
Debian:13
before 2.18-1
2.18-1
glibc
Debian:14
before 2.18-1
2.18-1
eglibc
Debian:6.0
before 2.11.3-4+deb6u4, plus listed versions
2.11.2-102.11.2-10+m68k.12.11.2-112.11.2-11+m68k.12.11.2-12
Show 5 moreShow less
2.11.2-132.11.3-12.11.3-22.11.3-32.11.3-4
2.11.3-4+deb6u4
eglibc
Debian:7
From an advisory covering 4 CVEs
before 2.13-38+deb7u7, plus listed versions
2.13-382.13-38+deb7u12.13-38+deb7u22.13-38+deb7u32.13-38+deb7u42.13-38+deb7u52.13-38+deb7u6
2.13-38+deb7u7
glibc
Red Hat:enterprise_linux:5::client
before 0:2.5-123.el5_11.1
0:2.5-123.el5_11.1
glibc-common
Red Hat:enterprise_linux:5::client
before 0:2.5-123.el5_11.1
0:2.5-123.el5_11.1
glibc-debuginfo
Red Hat:enterprise_linux:5::client
before 0:2.5-123.el5_11.1
0:2.5-123.el5_11.1
glibc-debuginfo-common
Red Hat:enterprise_linux:5::client
before 0:2.5-123.el5_11.1
0:2.5-123.el5_11.1
glibc-devel
Red Hat:enterprise_linux:5::client
before 0:2.5-123.el5_11.1
0:2.5-123.el5_11.1
glibc-headers
Red Hat:enterprise_linux:5::client
before 0:2.5-123.el5_11.1
0:2.5-123.el5_11.1
glibc-utils
Red Hat:enterprise_linux:5::client
before 0:2.5-123.el5_11.1
0:2.5-123.el5_11.1
nscd
Red Hat:enterprise_linux:5::client
before 0:2.5-123.el5_11.1
0:2.5-123.el5_11.1
glibc
Red Hat:enterprise_linux:5::server
before 0:2.5-123.el5_11.1
0:2.5-123.el5_11.1
glibc-common
Red Hat:enterprise_linux:5::server
before 0:2.5-123.el5_11.1
0:2.5-123.el5_11.1
glibc-debuginfo
Red Hat:enterprise_linux:5::server
before 0:2.5-123.el5_11.1
0:2.5-123.el5_11.1
glibc-debuginfo-common
Red Hat:enterprise_linux:5::server
before 0:2.5-123.el5_11.1
0:2.5-123.el5_11.1
glibc-devel
Red Hat:enterprise_linux:5::server
before 0:2.5-123.el5_11.1
0:2.5-123.el5_11.1
glibc-headers
Red Hat:enterprise_linux:5::server
before 0:2.5-123.el5_11.1
0:2.5-123.el5_11.1
glibc-utils
Red Hat:enterprise_linux:5::server
before 0:2.5-123.el5_11.1
0:2.5-123.el5_11.1
nscd
Red Hat:enterprise_linux:5::server
before 0:2.5-123.el5_11.1
0:2.5-123.el5_11.1
glibc
Red Hat:enterprise_linux:6::client
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-common
Red Hat:enterprise_linux:6::client
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-debuginfo
Red Hat:enterprise_linux:6::client
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-debuginfo-common
Red Hat:enterprise_linux:6::client
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-devel
Red Hat:enterprise_linux:6::client
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-headers
Red Hat:enterprise_linux:6::client
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-utils
Red Hat:enterprise_linux:6::client
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
nscd
Red Hat:enterprise_linux:6::client
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-static
Red Hat:enterprise_linux:6::client
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-common
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-debuginfo
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-debuginfo-common
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-devel
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-headers
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-utils
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
nscd
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-static
Red Hat:enterprise_linux:6::computenode
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc
Red Hat:enterprise_linux:6::server
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-common
Red Hat:enterprise_linux:6::server
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-debuginfo
Red Hat:enterprise_linux:6::server
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-debuginfo-common
Red Hat:enterprise_linux:6::server
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-devel
Red Hat:enterprise_linux:6::server
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-headers
Red Hat:enterprise_linux:6::server
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-utils
Red Hat:enterprise_linux:6::server
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
nscd
Red Hat:enterprise_linux:6::server
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-static
Red Hat:enterprise_linux:6::server
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-common
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-debuginfo
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-debuginfo-common
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-devel
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-headers
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-utils
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
nscd
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc-static
Red Hat:enterprise_linux:6::workstation
before 0:2.12-1.149.el6_6.5
0:2.12-1.149.el6_6.5
glibc
Red Hat:enterprise_linux:7::client
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-common
Red Hat:enterprise_linux:7::client
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-debuginfo
Red Hat:enterprise_linux:7::client
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-debuginfo-common
Red Hat:enterprise_linux:7::client
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-devel
Red Hat:enterprise_linux:7::client
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-headers
Red Hat:enterprise_linux:7::client
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-utils
Red Hat:enterprise_linux:7::client
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
nscd
Red Hat:enterprise_linux:7::client
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-static
Red Hat:enterprise_linux:7::client
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc
Red Hat:enterprise_linux:7::computenode
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-common
Red Hat:enterprise_linux:7::computenode
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-debuginfo
Red Hat:enterprise_linux:7::computenode
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-debuginfo-common
Red Hat:enterprise_linux:7::computenode
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-devel
Red Hat:enterprise_linux:7::computenode
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-headers
Red Hat:enterprise_linux:7::computenode
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-utils
Red Hat:enterprise_linux:7::computenode
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
nscd
Red Hat:enterprise_linux:7::computenode
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-static
Red Hat:enterprise_linux:7::computenode
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc
Red Hat:enterprise_linux:7::server
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-common
Red Hat:enterprise_linux:7::server
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-debuginfo
Red Hat:enterprise_linux:7::server
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-debuginfo-common
Red Hat:enterprise_linux:7::server
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-devel
Red Hat:enterprise_linux:7::server
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-headers
Red Hat:enterprise_linux:7::server
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-utils
Red Hat:enterprise_linux:7::server
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
nscd
Red Hat:enterprise_linux:7::server
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-static
Red Hat:enterprise_linux:7::server
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc
Red Hat:enterprise_linux:7::workstation
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-common
Red Hat:enterprise_linux:7::workstation
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-debuginfo
Red Hat:enterprise_linux:7::workstation
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-debuginfo-common
Red Hat:enterprise_linux:7::workstation
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-devel
Red Hat:enterprise_linux:7::workstation
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-headers
Red Hat:enterprise_linux:7::workstation
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-utils
Red Hat:enterprise_linux:7::workstation
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
nscd
Red Hat:enterprise_linux:7::workstation
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc-static
Red Hat:enterprise_linux:7::workstation
before 0:2.17-55.el7_0.5
0:2.17-55.el7_0.5
glibc
Red Hat:rhel_mission_critical:5.6
before 0:2.5-58.el5_6.6
0:2.5-58.el5_6.6
glibc-common
Red Hat:rhel_mission_critical:5.6
before 0:2.5-58.el5_6.6
0:2.5-58.el5_6.6
glibc-debuginfo
Red Hat:rhel_mission_critical:5.6
before 0:2.5-58.el5_6.6
0:2.5-58.el5_6.6
glibc-debuginfo-common
Red Hat:rhel_mission_critical:5.6
before 0:2.5-58.el5_6.6
0:2.5-58.el5_6.6
glibc-devel
Red Hat:rhel_mission_critical:5.6
before 0:2.5-58.el5_6.6
0:2.5-58.el5_6.6
glibc-headers
Red Hat:rhel_mission_critical:5.6
before 0:2.5-58.el5_6.6
0:2.5-58.el5_6.6
glibc-utils
Red Hat:rhel_mission_critical:5.6
before 0:2.5-58.el5_6.6
0:2.5-58.el5_6.6
nscd
Red Hat:rhel_mission_critical:5.6
before 0:2.5-58.el5_6.6
0:2.5-58.el5_6.6
glibc
Red Hat:rhel_eus:5.9
before 0:2.5-107.el5_9.8
0:2.5-107.el5_9.8
glibc-common
Red Hat:rhel_eus:5.9
before 0:2.5-107.el5_9.8
0:2.5-107.el5_9.8
glibc-debuginfo
Red Hat:rhel_eus:5.9
before 0:2.5-107.el5_9.8
0:2.5-107.el5_9.8
glibc-debuginfo-common
Red Hat:rhel_eus:5.9
before 0:2.5-107.el5_9.8
0:2.5-107.el5_9.8
glibc-devel
Red Hat:rhel_eus:5.9
before 0:2.5-107.el5_9.8
0:2.5-107.el5_9.8
glibc-headers
Red Hat:rhel_eus:5.9
before 0:2.5-107.el5_9.8
0:2.5-107.el5_9.8
glibc-utils
Red Hat:rhel_eus:5.9
before 0:2.5-107.el5_9.8
0:2.5-107.el5_9.8
nscd
Red Hat:rhel_eus:5.9
before 0:2.5-107.el5_9.8
0:2.5-107.el5_9.8
glibc
Red Hat:rhel_eus:6.4::computenode
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
glibc-common
Red Hat:rhel_eus:6.4::computenode
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
glibc-debuginfo
Red Hat:rhel_eus:6.4::computenode
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
glibc-debuginfo-common
Red Hat:rhel_eus:6.4::computenode
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
glibc-devel
Red Hat:rhel_eus:6.4::computenode
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
glibc-headers
Red Hat:rhel_eus:6.4::computenode
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
glibc-utils
Red Hat:rhel_eus:6.4::computenode
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
nscd
Red Hat:rhel_eus:6.4::computenode
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
glibc
Red Hat:rhel_eus:6.5::computenode
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
glibc-common
Red Hat:rhel_eus:6.5::computenode
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
glibc-debuginfo
Red Hat:rhel_eus:6.5::computenode
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
glibc-debuginfo-common
Red Hat:rhel_eus:6.5::computenode
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
glibc-devel
Red Hat:rhel_eus:6.5::computenode
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
glibc-headers
Red Hat:rhel_eus:6.5::computenode
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
glibc-utils
Red Hat:rhel_eus:6.5::computenode
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
nscd
Red Hat:rhel_eus:6.5::computenode
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
glibc-static
Red Hat:rhel_eus:6.4::computenode
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
glibc-static
Red Hat:rhel_eus:6.5::computenode
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
glibc
Red Hat:rhel_mission_critical:6.2::server
before 0:2.12-1.47.el6_2.15
0:2.12-1.47.el6_2.15
glibc-common
Red Hat:rhel_mission_critical:6.2::server
before 0:2.12-1.47.el6_2.15
0:2.12-1.47.el6_2.15
glibc-debuginfo
Red Hat:rhel_mission_critical:6.2::server
before 0:2.12-1.47.el6_2.15
0:2.12-1.47.el6_2.15
glibc-debuginfo-common
Red Hat:rhel_mission_critical:6.2::server
before 0:2.12-1.47.el6_2.15
0:2.12-1.47.el6_2.15
glibc-devel
Red Hat:rhel_mission_critical:6.2::server
before 0:2.12-1.47.el6_2.15
0:2.12-1.47.el6_2.15
glibc-headers
Red Hat:rhel_mission_critical:6.2::server
before 0:2.12-1.47.el6_2.15
0:2.12-1.47.el6_2.15
glibc-utils
Red Hat:rhel_mission_critical:6.2::server
before 0:2.12-1.47.el6_2.15
0:2.12-1.47.el6_2.15
nscd
Red Hat:rhel_mission_critical:6.2::server
before 0:2.12-1.47.el6_2.15
0:2.12-1.47.el6_2.15
glibc
Red Hat:rhel_eus:6.4::server
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
glibc-common
Red Hat:rhel_eus:6.4::server
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
glibc-debuginfo
Red Hat:rhel_eus:6.4::server
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
glibc-debuginfo-common
Red Hat:rhel_eus:6.4::server
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
glibc-devel
Red Hat:rhel_eus:6.4::server
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
glibc-headers
Red Hat:rhel_eus:6.4::server
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
glibc-utils
Red Hat:rhel_eus:6.4::server
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
nscd
Red Hat:rhel_eus:6.4::server
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
glibc
Red Hat:rhel_eus:6.5::server
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
glibc-common
Red Hat:rhel_eus:6.5::server
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
glibc-debuginfo
Red Hat:rhel_eus:6.5::server
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
glibc-debuginfo-common
Red Hat:rhel_eus:6.5::server
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
glibc-devel
Red Hat:rhel_eus:6.5::server
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
glibc-headers
Red Hat:rhel_eus:6.5::server
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
glibc-utils
Red Hat:rhel_eus:6.5::server
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
nscd
Red Hat:rhel_eus:6.5::server
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
glibc-static
Red Hat:rhel_mission_critical:6.2::server
before 0:2.12-1.47.el6_2.15
0:2.12-1.47.el6_2.15
glibc-static
Red Hat:rhel_eus:6.4::server
before 0:2.12-1.107.el6_4.7
0:2.12-1.107.el6_4.7
glibc-static
Red Hat:rhel_eus:6.5::server
before 0:2.12-1.132.el6_5.5
0:2.12-1.132.el6_5.5
glibc
Red Hat:rhel_els:4::as
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
glibc-common
Red Hat:rhel_els:4::as
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
glibc-debuginfo
Red Hat:rhel_els:4::as
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
glibc-debuginfo-common
Red Hat:rhel_els:4::as
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
glibc-devel
Red Hat:rhel_els:4::as
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
glibc-headers
Red Hat:rhel_els:4::as
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
glibc-profile
Red Hat:rhel_els:4::as
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
glibc-utils
Red Hat:rhel_els:4::as
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
nptl-devel
Red Hat:rhel_els:4::as
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
nscd
Red Hat:rhel_els:4::as
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
glibc
Red Hat:rhel_els:4::es
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
glibc-common
Red Hat:rhel_els:4::es
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
glibc-debuginfo
Red Hat:rhel_els:4::es
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
glibc-debuginfo-common
Red Hat:rhel_els:4::es
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
glibc-devel
Red Hat:rhel_els:4::es
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
glibc-headers
Red Hat:rhel_els:4::es
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
glibc-profile
Red Hat:rhel_els:4::es
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
glibc-utils
Red Hat:rhel_els:4::es
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
nptl-devel
Red Hat:rhel_els:4::es
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
nscd
Red Hat:rhel_els:4::es
before 0:2.3.4-2.57.el4.2
0:2.3.4-2.57.el4.2
rhev-hypervisor6
Red Hat:enterprise_linux:6::hypervisor
From an advisory covering 6 CVEs
before 0:6.6-20150123.1.el6ev
0:6.6-20150123.1.el6ev
php7
openSUSE:Tumbleweed
From an advisory covering 70 CVEs
before 7.0.14-1.4
7.0.14-1.4
php5
openSUSE:Tumbleweed
From an advisory covering 71 CVEs
before 5.6.28-1.1
5.6.28-1.1
php8
openSUSE:Tumbleweed
From an advisory covering 97 CVEs
before 8.0.11-1.1
8.0.11-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubaaronfay/CVE-2015-0235-test2015-01-27
MetasploitExim GHOST (glibc gethostbyname) Buffer Overflow2015-01-27
PoC in GitHubfser/ghost-checker2015-01-27
PoC in GitHubmikesplain/CVE-2015-0235-cookbook2015-01-27
PoC in GitHubadherzog/ansible-CVE-2015-0235-GHOST2015-01-28
PoC in GitHubfavoretti/lenny-libc62015-01-28
PoC in GitHubfuryutei/CVE-2015-0235_GHOST2015-01-28
Exploit-DBExim ESMTP 4.80 - glibc gethostbyname Denial of Service2015-01-29
PoC in GitHubF88/ghostbusters152015-01-29
PoC in GitHubkoudaiii-archives/cookbook-update-glibc2015-01-29
Show 10 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubnickanderson/cfengine-CVE_2015_02352015-01-29
PoC in GitHubtobyzxj/CVE-2015-02352015-01-30
PoC in GitHubmakelinux/CVE-2015-0235-workaround2015-02-02
Exploit-DBExim - 'GHOST' glibc gethostbyname Buffer Overflow (Metasploit)2015-03-18
PoC in GitHubarm13/ghost_exploit2015-03-28
PoC in GitHubalanmeyer/CVE-glibc2016-02-25
PoC in GitHub1and1-serversupport/ghosttester2016-03-07
PoC in GitHubsUbc0ol/CVE-2015-02352017-06-30
PoC in GitHubchayim/GHOSTCHECK-cve-2015-02352020-03-24
MetasploitWordPress XMLRPC GHOST Vulnerability Scanner

What each source reports

NVD Score used10.0

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

Record
CVE-2015-0235
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-787
Updated
2026-11-02
CVE ListNo score

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

Record
CVE-2015-0235
Updated
2026-11-02
EUVDEUVD-2015-0257No score

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

Record
EUVD-2015-0257
Updated
2026-11-03
GitHub AdvisoriesGHSA-jwcp-p679-fcr4No score

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x...

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

Record
GHSA-jwcp-p679-fcr4
Weakness
CWE-787
Updated
2026-11-02
OSVCLSA-2020-1605798462No score

Fix of 227 CVE

  • Fix bug #69720: Null pointer dereference in phar_get_fp_offset()
  • Fix bug #70728: Type Confusion Vulnerability in PHP_to_XMLRPC_worker()
  • Fix bug #70661: Use After Free Vulnerability in WDDX Packet Deserialization
  • Fix bug #70741: Session WDDX Packet Deserialization Type Confusion Vulnerability
  • Fix bug #71459: Integer overflow in iptcembed()
  • Fix bug #71039: exec functions ignore length but look for NULL termination
  • Fix bug #71354: Heap corruption in tar/zip/phar parser.
  • Fix bug #71391: NULL Pointer Dereference in phar_tar_setupmetadata()
  • Fix bug #71323: Output of stream_get_meta_data can be falsified by its input
  • Fix bug #71498: Out-of-Bound Read in phar_parse_zipfile()
  • Fix bug #71587: Use-After-Free / Double-Free in WDDX Deserialize
  • Fix bug #71860: Invalid memory write in phar on filename with \0 in name
  • Fix bug #71798: Integer Overflow in php_raw_url_encode
  • Fix bug #72837: integer overflow in bzdecompress caused heap corruption
  • Fix bug #72681: PHP Session Data Injection Vulnerability
  • Fix bug #72807: integer overflow in curl_escape caused heap corruption
  • Fix bug #72838: Integer overflow lead to heap corruption in sql_regcase
  • Fix bug #72697: select_colors write out-of-bounds
  • Fix bug #72730: imagegammacorrect allows arbitrary write access
  • Fix bug #72836: integer overflow in base64_decode caused heap corruption
  • Fix bug #72848: integer overflow in quoted_printable_encode caused heap corruption
  • Fix bug #72849: integer overflow in urlencode caused heap corruption
  • Fix bug #72850: integer overflow in php_uuencode caused heap corruption
  • Fix bug #72771: ftps:// wrapper is vulnerable to protocol downgrade attack
  • Fix bug #72749: wddx_deserialize allows illegal memory access
  • Fix bug #72750: wddx_deserialize null dereference
  • Fix bug #72790: wddx_deserialize null dereference with invalid xml
  • Fix bug #72799: wddx_deserialize null dereference in php_wddx_pop_element
  • Fix bug #73189: Memcpy negative size parameter php_resolve_path
  • Fix bug #73150: missing NULL check in dom_document_save_html
  • Fix bug #73284: heap overflow in php_ereg_replace function
  • Fix bug #73218: stack-buffer-overflow through "ResourceBundle" methods
  • Fix bug #73208: integer overflow in imap_8bit caused heap corruption
  • Fix bug #73082: string length overflow in mb_encode_* function
  • Fix bug #73174: heap overflow in php_pcre_replace_impl
  • Fix bug #73276: crash in openssl_random_pseudo_bytes function
  • Fix bug #73275: crash in openssl_encrypt function
  • Fix bug #73017: memory corruption in wordwrap function
  • Fix bug #73240: Write out of bounds at number_format
  • Fix bug #73073: CachingIterator null dereference when convert to string
  • Fix bug #73293: NULL pointer dereference in SimpleXMLElement::asXML()
  • Fix bug #73356: crash in bzcompress function
  • Fix bug #72696: imagefilltoborder stackoverflow on truecolor images
  • Fix bug #73418: Integer Overflow in "_php_imap_mail" leads Heap Overflow
  • Fix bug #73144: Use-after-free in ArrayObject Deserialization
  • Fix bug #73192: parse_url return wrong hostname
  • Fix bug #73331: NULL Pointer Dereference in WDDX Packet Deserialization with PDORow
  • Fix bug #73452: Segfault (Regression for #69152)
  • Fix bug #73631: Invalid read when wddx decodes empty boolean element
  • Fix bug #67587: Redirection loop on nginx with FPM
  • Fix bug #71465: PHAR doesn't know about litespeed
  • Fix bug #73737: FPE when parsing a tag format
  • Fix bug #73868: Fix DOS vulnerability in gdImageCreateFromGd2Ctx()
  • Fix bug #73869: Signed Integer Overflow gd_io.c
  • Fix bug #73773: Seg fault when loading hostile phar
  • Fix bug #70436: Use After Free Vulnerability in unserialize()
  • Fix bug #74603: PHP INI Parsing Stack Buffer Overflow Vulnerability
  • Fix bug #72535: arcfour encryption stream filter crashes php
  • Fix bug #72434: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unseria
  • Fix bug #72455: Heap Overflow due to integer overflows
  • Fix bug #74782:…
Record
CLSA-2020-1605798462
Updated
2026-11-02
OSVNo score

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

Record
CVE-2015-0235
Updated
2026-11-02
Show 9 moreShow less
OSVDEBIAN-CVE-2015-0235No score

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

Record
DEBIAN-CVE-2015-0235
Updated
2026-11-02
OSVopenSUSE-SU-2024:10290-1No score

apache2-mod_php7-7.0.14-1.4 on GA media

These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10290-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10344-1No score

apache2-mod_php5-5.6.28-1.1 on GA media

These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10344-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11169-1No score

php8-8.0.11-1.1 on GA media

These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11169-1
Updated
2026-11-02
OSVSUSE-RU-2015:0794-1No score

Security update for glibc

This glibc update fixes a critical privilege escalation problem and two non-security issues:

* bnc#892073: An off-by-one error leading to a heap-based buffer
  overflow was found in __gconv_translit_find(). An exploit that
  targets the problem is publicly available. (CVE-2014-5119)
* bnc#892065: setenv-alloca.patch: Avoid unbound alloca in setenv.
* bnc#888347: printf-multibyte-format.patch: Don't parse %s format
  argument as multi-byte string.

Security Issues:

* CVE-2014-5119
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5119>
Record
SUSE-RU-2015:0794-1
Updated
2026-11-02
OSVSUSE-SU-2015:0253-1No score

Security update for glibc

This glibc update fixes a critical privilege escalation problem and two non-security issues:

* bnc#892073: An off-by-one error leading to a heap-based buffer
  overflow was found in __gconv_translit_find(). An exploit that
  targets the problem is publicly available. (CVE-2014-5119)
* bnc#892065: setenv-alloca.patch: Avoid unbound alloca in setenv.
* bnc#888347: printf-multibyte-format.patch: Don't parse %s format
  argument as multi-byte string.

Security Issues:

* CVE-2014-5119
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5119>
Record
SUSE-SU-2015:0253-1
Updated
2026-11-02
OSVSUSE-SU-2015:0439-1No score

Security update for glibc

This glibc update fixes a critical privilege escalation problem and two non-security issues:

* bnc#892073: An off-by-one error leading to a heap-based buffer
  overflow was found in __gconv_translit_find(). An exploit that
  targets the problem is publicly available. (CVE-2014-5119)
* bnc#892065: setenv-alloca.patch: Avoid unbound alloca in setenv.
* bnc#888347: printf-multibyte-format.patch: Don't parse %s format
  argument as multi-byte string.

Security Issues:

* CVE-2014-5119
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5119>
Record
SUSE-SU-2015:0439-1
Updated
2026-11-02
OSVSUSE-SU-2015:0551-1No score

Security update for glibc

This update for glibc contains the following fixes:

* Fix integer overflows in malloc (CVE-2013-4332, bnc#839870)
* Fix buffer overflow in glob (bnc#691365)
* Fix buffer overflow in strcoll (CVE-2012-4412, bnc#779320)
* Update mount flags in <sys/mount.h> (bnc#791928)
* Fix buffer overrun in regexp matcher (CVE-2013-0242, bnc#801246)
* Fix memory leaks in dlopen (bnc#811979)
* Fix stack overflow in getaddrinfo with many results (CVE-2013-1914,
  bnc#813121)
* Fix check for XEN build in glibc_post_upgrade that causes missing
  init re-exec (bnc#818628)
* Don't raise UNDERFLOW in tan/tanf for small but normal argument
  (bnc#819347)
* Properly cross page boundary in SSE4.2 implementation of strcmp
  (bnc#822210)
* Fix robust mutex handling after fork (bnc#827811)
* Fix missing character in IBM-943 charset (bnc#828235)
* Fix use of alloca in gaih_inet (bnc#828637)
* Initialize pointer guard also in static executables (CVE-2013-4788,
  bnc#830268)
* Fix readdir_r with long file names (CVE-2013-4237, bnc#834594).

Security Issues:

* CVE-2012-4412
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4412>
* CVE-2013-0242
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0242>
* CVE-2013-1914
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1914>
* CVE-2013-4237
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4237>
* CVE-2013-4332
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4332>
* CVE-2013-4788
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4788>
Record
SUSE-SU-2015:0551-1
Updated
2026-11-02
OSVUBUNTU-CVE-2015-0235No score

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

Record
UBUNTU-CVE-2015-0235
Updated
2026-11-02

History

History
RecordedChangedSources
affected, exploits, facts
affected, exploits
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 143 references and the rest of 1 source description. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open