CVE-2015-5229

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of service (hang or crash) via unspecified vectors.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-17

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Apr 8, 2016
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2015

CVE-2015-52307.5The DNS packet parsing/generation code in PowerDNS (aka pdns) Authoritative Server 3.4.x before 3.4.6 allows remote attackers to cause a denCVE-2015-52315.5The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive informaCVE-2015-52328.1Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197.CVE-2015-52334.2Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which allows (1) remote authenticated users with tCVE-2015-52346.8IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets intoCVE-2015-52354.3IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers toCVE-2015-52367.5It was discovered that the IcedTea-Web used codebase attribute of the <applet> tag on the HTML page that hosts Java applet in the Same OrigiCVE-2015-52378.8protobuf allows remote authenticated attackers to cause a heap-based buffer overflow.CVE-2015-52396.5Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CCVE-2015-52403.5Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, aCVE-2015-52416.1After logging into the portal, the logout jsp page redirects the browser back to the login page after. It is feasible for malicious users toCVE-2015-52426.0OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows rem