CVE-2015-1781

Name of the Vulnerable Software and Affected Versions glibc versions prior to 2.22

Description The issue is related to a buffer overflow in the gethostbyname r and other unspecified NSS functions in the GNU C Library. This allows context-dependent attackers to cause a denial of service or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer.

Recommendations For versions prior to 2.22, update to version 2.22 or later to resolve the issue. As a temporary workaround, consider restricting DNS responses to prevent the exploitation of the buffer overflow in the gethostbyname r function.