PT-2015-3450

CVE-2015-5180

·

Published

2015-08-10

·

Updated

2024-06-15

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions glibc versions prior to 2.25
Description The issue is related to the res query function in the libresolv component of the GNU C Library, which is vulnerable to errors related to pointer dereferences. This allows remote attackers to cause a denial of service, resulting in a process crash due to a NULL pointer dereference.
Recommendations For versions prior to 2.25, update to version 2.25 or later to resolve the issue. As a temporary workaround, consider restricting access to the res query function in the libresolv component until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2017-1429
CESA-2018_0805
MGASA-2017-0091
OPENSUSE-SU-2024:10792-1
RHSA-2018:0805
RHSA-2018_0805
SUSE-SU-2018:2883-1
SUSE-SU-2018_2883-1
SUSE-SU-2019:1716-1
SUSE-SU-2019_1716-1
SUSE-SU-2022:2886-1
SUSE-SU-2022_2886-1
USN-3239-1
USN-3239-2
Found an issue in the description? Have something to add? Feel free to write us 👾