CVE-2015-0235

CVE-2015-0235

Published · Updated

Follow this CVE+ Monitor glibc

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 95%
from disclosure to weaponsame day
Published on NVDJan 28
1st PoCJan 27
metasploitJan 27
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
33 products (605 components)
Red Hat Enterprise Linux (v. 5 server) · Red Hat Enterprise Linux EUS (v. 5.9 server) · Red Hat Enterprise Linux Server (v. 6) · Red Hat Enterprise Linux Server EUS (v. 6.4) · Red Hat Enterprise Linux Server EUS (v. 6.5) · and others 28
fix ↗
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."
Affected products
n/a · n/a
public PoCs found — 24✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/36421exploitdbwww.exploit-db.com/exploits/35951unverifiedgithubgithub.com/aaronfay/CVE-2015-0235-test★ 15githubgithub.com/makelinux/CVE-2015-0235-workaround★ 6githubgithub.com/fser/ghost-checker★ 6githubgithub.com/arm13/ghost_exploit★ 4githubgithub.com/mikesplain/CVE-2015-0235-cookbook★ 3githubgithub.com/adherzog/ansible-CVE-2015-0235-GHOST★ 1githubgithub.com/nickanderson/cfengine-CVE_2015_0235★ 1githubgithub.com/furyutei/CVE-2015-0235_GHOST★ 1githubgithub.com/tobyzxj/CVE-2015-0235★ 0githubgithub.com/alanmeyer/CVE-glibc★ 0githubgithub.com/sUbc0ol/CVE-2015-0235★ 0githubgithub.com/chayim/GHOSTCHECK-cve-2015-0235★ 0githubgithub.com/favoretti/lenny-libc6★ 0githubgithub.com/koudaiii-archives/cookbook-update-glibc★ 0githubgithub.com/F88/ghostbusters15★ 0githubgithub.com/1and1-serversupport/ghosttester★ 0cve_referencepacketstormsecurity.com/files/130171/Exim-ESMTP-GHOST-Denial-Of-Service.htmlunverifiedcve_referencepacketstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.htmlunverifiedcve_referencepacketstormsecurity.com/files/130974/Exim-GHOST-glibc-gethostbyname-Buffer-Overflow.htmlunverifiedcve_referencepacketstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.htmlunverifiedcve_referencepacketstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.htmlunverifiedcve_referencepacketstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.htmlunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.