● CVE — High
CVE-2015-7547
Vendordebian, suse, canonical, redhat, f5Productdebian linux, linux enterprise desktop, linux enterprise server, linux enterprise software development kit, ubuntu linux, enterprise linux desktop, linux enterprise debuginfo, big-ip advanced firewall manager, big-ip policy enforcement manager, big-ip access policy manager, big-ip analytics, big-ip application acceleration manager, big-ip application security manager, big-ip link controller, big-ip local traffic manager, suse linux enterprise server, opensuse, big-ip domain name system, helion openstack, enterprise linux hpc node, enterprise linux hpc node eus, unified threat management software, fujitsu m10 firmware, exalogic infrastructure, server migration packDiscoveredFeb 18, 2016UpdatedMay 6, 2026
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.