Search/CVE-2015-0235
● CVE

CVE-2015-0235

Vendordebian, redhat, php, oracle, gnuProductdebian linux, virtualization, php, vm virtualbox, communications webrtc session controller, glibc, communications session border controller, mac os x, communications eagle application processor, communications policy management, communications application session controller, security access manager for enterprise single sign-on, linux, communications lsms, pureapplication system, communications eagle lnp application processor, communications user data repository, exalogic infrastructureDiscoveredJan 28, 2015UpdatedMay 6, 2026

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

CVSS v3.1
—
EPSS
94.6%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage