GNU glibc CVE-2015-5180 Remote Denial of Service Vulnerability
BID:99324
Info
GNU glibc CVE-2015-5180 Remote Denial of Service Vulnerability
| Bugtraq ID: | 99324 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2015-5180 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 27 2017 12:00AM |
| Updated: | Jun 27 2017 12:00AM |
| Credit: | Florian Weimer of Red Hat Product Security. |
| Vulnerable: |
GNU glibc 2.12.2 GNU glibc 2.12.1 GNU glibc 2.11.2 GNU glibc 2.11.1 GNU glibc 2.10.1 GNU glibc 2.2.5 GNU glibc 2.2.4 GNU glibc 2.2.3 GNU glibc 2.2.2 GNU glibc 2.2.1 GNU glibc 2.2 GNU glibc 2.1.3 GNU glibc 2.1.2 GNU glibc 2.1.1 GNU glibc 2.1 GNU glibc 2.0.6 GNU glibc 2.0.5 GNU glibc 2.0.4 GNU glibc 2.0.3 GNU glibc 2.0.2 GNU glibc 2.0.1 GNU glibc 2.0 GNU glibc 2.24 GNU glibc 2.23 GNU glibc 2.22 GNU glibc 2.21 GNU glibc 2.20 GNU glibc 2.19 GNU glibc 2.18 GNU glibc 2.17 GNU glibc 2.16 GNU glibc 2.15 GNU glibc 2.14.1 GNU glibc 2.14 GNU glibc 2.13 GNU glibc 2.12 GNU glibc 2.11.3 GNU glibc 2.11 GNU glibc 2.10 GNU Cfengine 1.2.3 |
| Not Vulnerable: |
GNU glibc 2.25 |
Discussion
GNU glibc CVE-2015-5180 Remote Denial of Service Vulnerability
GNU glibc is prone to a remote denial-of-service vulnerability.
Successfully exploiting this issue allows remote attackers to crash the affected process, denying service to legitimate users.
Versions prior to GNU glibc 2.25 are vulnerable.
GNU glibc is prone to a remote denial-of-service vulnerability.
Successfully exploiting this issue allows remote attackers to crash the affected process, denying service to legitimate users.
Versions prior to GNU glibc 2.25 are vulnerable.
Exploit / POC
GNU glibc CVE-2015-5180 Remote Denial of Service Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
GNU glibc CVE-2015-5180 Remote Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
GNU glibc CVE-2015-5180 Remote Denial of Service Vulnerability
References:
References:
- CVE-2015-5180: resolv: Fix crash with internal QTYPE [BZ #18784] (Sourceware)
- glibc Homepage (GNU)
- GNU Homepage (GNU)
- The GNU C Library version 2.25 is now available (Sourceware)
- Bug 1249603 CVE-2015-5180 glibc: DNS resolver NULL pointer dereference with craf (Redhat)
- Bug 18784 (CVE-2015-5180) - res_query and related function crash for special rec (Sourceware)
- CVE-2015-5180 (Redhat)
- Oracle Linux Bulletin - April 2018 (Oracle)