Уязвимость CVE-2015-7547: Информация
Описание
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.
Важность: HIGH (8,1) Вектор: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Исправленные пакеты
Имя пакета | Ветка | Исправлено в версии | Версия в репозитории | Errata ID | № Задания | Состояние |
|---|---|---|---|---|---|---|
| glibc | sisyphus | 2.23-alt1 | 2.38.0.76.e9f05fa1c6-alt1 | ALT-PU-2016-1135-1 | 158600 | Исправлено |
| glibc | p10 | 2.23-alt1 | 2.32-alt5.p10.3 | ALT-PU-2016-1135-1 | 158600 | Исправлено |
| glibc | p9 | 2.23-alt1 | 2.27-alt14 | ALT-PU-2016-1135-1 | 158600 | Исправлено |
| glibc | c10f1 | 2.23-alt1 | 2.32-alt5.p10.2 | ALT-PU-2016-1135-1 | 158600 | Исправлено |
| glibc | c9f2 | 2.23-alt1 | 2.27-alt14 | ALT-PU-2016-1135-1 | 158600 | Исправлено |
| glibc | c7 | 2.17-alt5.M70C.7 | 2.17-alt5.M70C.14 | ALT-PU-2016-1126-1 | 159681 | Исправлено |