Description
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."
Metrics
CVSS 2.0 10.0/10
AV:N/AC:L/Au:N/C:C/I:C/A:CWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://blogs.sophos.com/2015/01/29/sophos-products-and-the-ghost-vulnerability-affecting-linux/Third Party Advisory
- http://linux.oracle.com/errata/ELSA-2015-0090.htmlThird Party Advisory
- http://linux.oracle.com/errata/ELSA-2015-0092.htmlThird Party Advisory
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.htmlMailing List, Third Party Advisory
- http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.htmlMailing List, Third Party Advisory
- http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlMailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=142296726407499&w=2Issue Tracking, Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=142721102728110&w=2Issue Tracking, Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=142722450701342&w=2Issue Tracking, Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=142781412222323&w=2Issue Tracking, Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=143145428124857&w=2Issue Tracking, Mailing List, Third Party Advisory
- http://packetstormsecurity.com/files/130171/Exim-ESMTP-GHOST-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.htmlThird Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/130974/Exim-GHOST-glibc-gethostbyname-Buffer-Overflow.htmlExploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.htmlExploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.htmlExploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.htmlExploit, Third Party Advisory, VDB Entry
- http://rhn.redhat.com/errata/RHSA-2015-0126.htmlThird Party Advisory
- http://seclists.org/fulldisclosure/2015/Jan/111Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Jun/18Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Sep/0Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Jun/36Exploit, Mailing List, Third Party Advisory
- http://seclists.org/oss-sec/2015/q1/269Mailing List, Third Party Advisory
- http://seclists.org/oss-sec/2015/q1/274Exploit, Mailing List, Third Party Advisory
- http://secunia.com/advisories/62517Not Applicable
- http://secunia.com/advisories/62640Not Applicable
- http://secunia.com/advisories/62667Not Applicable
- http://secunia.com/advisories/62680Not Applicable
- http://secunia.com/advisories/62681Not Applicable
- http://secunia.com/advisories/62688Not Applicable
- http://secunia.com/advisories/62690Not Applicable
- http://secunia.com/advisories/62691Not Applicable
- http://secunia.com/advisories/62692Not Applicable
- http://secunia.com/advisories/62698Not Applicable
- http://secunia.com/advisories/62715Not Applicable
- http://secunia.com/advisories/62758Not Applicable
- http://secunia.com/advisories/62812Not Applicable
- http://secunia.com/advisories/62813Not Applicable
- http://secunia.com/advisories/62816Not Applicable
- http://secunia.com/advisories/62865Not Applicable
- http://secunia.com/advisories/62870Not Applicable
- http://secunia.com/advisories/62871Not Applicable
- http://secunia.com/advisories/62879Not Applicable
- http://secunia.com/advisories/62883Not Applicable
- http://support.apple.com/kb/HT204942Third Party Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150128-ghostThird Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21695695Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21695774Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21695835Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21695860Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21696131Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21696243Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21696526Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21696600Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21696602Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21696618Third Party Advisory
- http://www.debian.org/security/2015/dsa-3142Third Party Advisory
- http://www.idirect.net/Partners/~/media/Files/CVE/iDirect-Posted-Common-Vulnerabilities-and-Exposures.pdfBroken Link, URL Repurposed
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:039Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/05/04/7Exploit, Mailing List
Timeline
- Published
- Jan 28, 2015
- Last modified
- Jun 17, 2026
- NVD status
- Modified