CVE-2015-5229
The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not...
7.5 HighFix available
The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of service (hang or crash) via unspecified vectors.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
2.24%Up 1.1 points since Feb 4, 2022
What each source reports
NVD Score used
The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of service (hang or crash) via unspecified vectors.
- Record
CVE-2015-5229- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-17
- Updated
- 2026-11-02
CVE List No score
The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of service (hang or crash) via unspecified vectors.
- Record
CVE-2015-5229- Updated
- 2026-11-02
EUVDEUVD-2015-5225 No score
The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of service (hang or crash) via unspecified vectors.
- Record
EUVD-2015-5225- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vhfq-hmc6-hfjh
The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not...
The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of service (hang or crash) via unspecified vectors.
- Record
GHSA-vhfq-hmc6-hfjh- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
glibcRed Hat:enterprise_linux:6::client |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-commonRed Hat:enterprise_linux:6::client |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-debuginfo-commonRed Hat:enterprise_linux:6::client |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-develRed Hat:enterprise_linux:6::client |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-headersRed Hat:enterprise_linux:6::client |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-utilsRed Hat:enterprise_linux:6::client |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
nscdRed Hat:enterprise_linux:6::client |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-staticRed Hat:enterprise_linux:6::client |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibcRed Hat:enterprise_linux:6::computenode |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
Show 62 moreShow less
| Package | Affected | Fixed |
|---|---|---|
glibc-commonRed Hat:enterprise_linux:6::computenode |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-debuginfo-commonRed Hat:enterprise_linux:6::computenode |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-develRed Hat:enterprise_linux:6::computenode |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-headersRed Hat:enterprise_linux:6::computenode |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-utilsRed Hat:enterprise_linux:6::computenode |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
nscdRed Hat:enterprise_linux:6::computenode |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-staticRed Hat:enterprise_linux:6::computenode |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibcRed Hat:enterprise_linux:6::server |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-commonRed Hat:enterprise_linux:6::server |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-debuginfo-commonRed Hat:enterprise_linux:6::server |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-develRed Hat:enterprise_linux:6::server |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-headersRed Hat:enterprise_linux:6::server |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-utilsRed Hat:enterprise_linux:6::server |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
nscdRed Hat:enterprise_linux:6::server |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-staticRed Hat:enterprise_linux:6::server |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibcRed Hat:enterprise_linux:6::workstation |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-commonRed Hat:enterprise_linux:6::workstation |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-debuginfo-commonRed Hat:enterprise_linux:6::workstation |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-develRed Hat:enterprise_linux:6::workstation |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-headersRed Hat:enterprise_linux:6::workstation |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-utilsRed Hat:enterprise_linux:6::workstation |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
nscdRed Hat:enterprise_linux:6::workstation |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibc-staticRed Hat:enterprise_linux:6::workstation |
before 0:2.12-1.166.el6_7.1 | 0:2.12-1.166.el6_7.1 |
glibcRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-commonRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-debuginfo-commonRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-develRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-headersRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-utilsRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
nscdRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-staticRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibcRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-commonRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-debuginfo-commonRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-develRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-headersRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-utilsRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
nscdRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-staticRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibcRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-commonRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-debuginfo-commonRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-develRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-headersRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-utilsRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
nscdRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-staticRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibcRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-commonRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-debuginfo-commonRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-develRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-headersRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-utilsRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
nscdRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
glibc-staticRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:2.17-106.el7_2.4 | 0:2.17-106.el7_2.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-5229 is a high vulnerability (CVSS 7.5) in Redhat Enterprise Linux, published April 8, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.24%, the 82nd percentile. Fixed in glibc 0:2.12-1.166.el6_7.1.
References
bugzilla.redhat.com/show_bug.cgi?id=1246713
securityfocus.com/bid/84172
oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
rhn.redhat.com/errata/RHSA-2016-0176.html
Show 17 moreShow less
kc.mcafee.com/corporate/index?page=content&id=SB10150
nvd.nist.gov/vuln/detail/CVE-2015-5229
github.com/advisories/GHSA-vhfq-hmc6-hfjh
access.redhat.com/errata/RHBA-2015:1465
security.access.redhat.com/data/csaf/v2/advisories/2015/rhba-2015_1465.json
cve.org/CVERecord?id=CVE-2015-5229