csaf_suse - suse-su-2016:0470-1

Vulnerability from csaf_suse

Published

2016-02-16 15:37

Modified

2016-02-16 15:37

Summary

Security update for glibc

Notes

Title of the patch

Security update for glibc

Description of the patch

This update for glibc fixes the following issues: - CVE-2015-7547: A stack-based buffer overflow in getaddrinfo allowed remote attackers to cause a crash or execute arbitrary code via crafted and timed DNS responses (bsc#961721) - CVE-2015-8777: Insufficient checking of LD_POINTER_GUARD environment variable allowed local attackers to bypass the pointer guarding protection of the dynamic loader on set-user-ID and set-group-ID programs (bsc#950944) - CVE-2015-8776: Out-of-range time values passed to the strftime function may cause it to crash, leading to a denial of service, or potentially disclosure information (bsc#962736) - CVE-2015-8778: Integer overflow in hcreate and hcreate_r could have caused an out-of-bound memory access. leading to application crashes or, potentially, arbitrary code execution (bsc#962737) - CVE-2014-9761: A stack overflow (unbounded alloca) could have caused applications which process long strings with the nan function to crash or, potentially, execute arbitrary code. (bsc#962738) - CVE-2015-8779: A stack overflow (unbounded alloca) in the catopen function could have caused applications which pass long strings to the catopen function to crash or, potentially execute arbitrary code. (bsc#962739) - CVE-2013-2207: pt_chown tricked into granting access to another users pseudo-terminal (bsc#830257) - CVE-2013-4458: Stack (frame) overflow in getaddrinfo() when called with AF_INET6 (bsc#847227) - CVE-2014-8121: denial of service issue in the NSS backends (bsc#918187) - bsc#920338: Read past end of pattern in fnmatch - CVE-2015-1781: buffer overflow in nss_dns (bsc#927080) The following non-security bugs were fixed: - bnc#892065: SIGSEV tst-setlocale3 in glibc-2.11.3-17.68.1 - bnc#863499: Memory leak in getaddrinfo when many RRs are returned - bsc#892065: Avoid unbound alloca in setenv - bsc#945779: Properly reread entry after failure in nss_files getent function

Patchnames

slessp2-glibc-12405

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for glibc",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "\nThis update for glibc fixes the following issues:\n\n- CVE-2015-7547: A stack-based buffer overflow in getaddrinfo allowed remote attackers to cause a crash or execute arbitrary code via crafted and timed DNS responses (bsc#961721)\n- CVE-2015-8777: Insufficient checking of LD_POINTER_GUARD environment variable allowed local attackers to bypass the pointer guarding protection of the dynamic loader on set-user-ID and set-group-ID programs (bsc#950944)\n- CVE-2015-8776: Out-of-range time values passed to the strftime function may cause it to crash, leading to a denial of service, or potentially disclosure information (bsc#962736)\n- CVE-2015-8778: Integer overflow in hcreate and hcreate_r could have caused an out-of-bound memory access. leading to application crashes or, potentially, arbitrary code execution (bsc#962737)\n- CVE-2014-9761: A stack overflow (unbounded alloca) could have caused applications which process long strings with the nan function to crash or, potentially, execute arbitrary code. (bsc#962738)\n- CVE-2015-8779: A stack overflow (unbounded alloca) in the catopen function could have caused applications which pass long strings to the catopen function to crash or, potentially execute arbitrary code. (bsc#962739)\n- CVE-2013-2207: pt_chown tricked into granting access to another users pseudo-terminal (bsc#830257)\n- CVE-2013-4458: Stack (frame) overflow in getaddrinfo() when called with AF_INET6 (bsc#847227)\n- CVE-2014-8121: denial of service issue in the NSS backends (bsc#918187)\n- bsc#920338: Read past end of pattern in fnmatch\n- CVE-2015-1781: buffer overflow in nss_dns (bsc#927080)\n\nThe following non-security bugs were fixed:\n\n- bnc#892065: SIGSEV tst-setlocale3 in glibc-2.11.3-17.68.1\n- bnc#863499: Memory leak in getaddrinfo when many RRs are returned \n- bsc#892065: Avoid unbound alloca in setenv\n- bsc#945779: Properly reread entry after failure in nss_files getent function\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "slessp2-glibc-12405",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_0470-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2016:0470-1",
            url: "https://www.suse.com/support/update/announcement/2016/suse-su-20160470-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2016:0470-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2016-February/001882.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 830257",
            url: "https://bugzilla.suse.com/830257",
         },
         {
            category: "self",
            summary: "SUSE Bug 847227",
            url: "https://bugzilla.suse.com/847227",
         },
         {
            category: "self",
            summary: "SUSE Bug 863499",
            url: "https://bugzilla.suse.com/863499",
         },
         {
            category: "self",
            summary: "SUSE Bug 892065",
            url: "https://bugzilla.suse.com/892065",
         },
         {
            category: "self",
            summary: "SUSE Bug 918187",
            url: "https://bugzilla.suse.com/918187",
         },
         {
            category: "self",
            summary: "SUSE Bug 920338",
            url: "https://bugzilla.suse.com/920338",
         },
         {
            category: "self",
            summary: "SUSE Bug 927080",
            url: "https://bugzilla.suse.com/927080",
         },
         {
            category: "self",
            summary: "SUSE Bug 945779",
            url: "https://bugzilla.suse.com/945779",
         },
         {
            category: "self",
            summary: "SUSE Bug 950944",
            url: "https://bugzilla.suse.com/950944",
         },
         {
            category: "self",
            summary: "SUSE Bug 961721",
            url: "https://bugzilla.suse.com/961721",
         },
         {
            category: "self",
            summary: "SUSE Bug 962736",
            url: "https://bugzilla.suse.com/962736",
         },
         {
            category: "self",
            summary: "SUSE Bug 962737",
            url: "https://bugzilla.suse.com/962737",
         },
         {
            category: "self",
            summary: "SUSE Bug 962738",
            url: "https://bugzilla.suse.com/962738",
         },
         {
            category: "self",
            summary: "SUSE Bug 962739",
            url: "https://bugzilla.suse.com/962739",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2013-2207 page",
            url: "https://www.suse.com/security/cve/CVE-2013-2207/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2013-4458 page",
            url: "https://www.suse.com/security/cve/CVE-2013-4458/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2014-8121 page",
            url: "https://www.suse.com/security/cve/CVE-2014-8121/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2014-9761 page",
            url: "https://www.suse.com/security/cve/CVE-2014-9761/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-1781 page",
            url: "https://www.suse.com/security/cve/CVE-2015-1781/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-7547 page",
            url: "https://www.suse.com/security/cve/CVE-2015-7547/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8776 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8776/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8777 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8777/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8778 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8778/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-8779 page",
            url: "https://www.suse.com/security/cve/CVE-2015-8779/",
         },
      ],
      title: "Security update for glibc",
      tracking: {
         current_release_date: "2016-02-16T15:37:56Z",
         generator: {
            date: "2016-02-16T15:37:56Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2016:0470-1",
         initial_release_date: "2016-02-16T15:37:56Z",
         revision_history: [
            {
               date: "2016-02-16T15:37:56Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "glibc-2.11.3-17.45.66.1.i586",
                        product: {
                           name: "glibc-2.11.3-17.45.66.1.i586",
                           product_id: "glibc-2.11.3-17.45.66.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-devel-2.11.3-17.45.66.1.i586",
                        product: {
                           name: "glibc-devel-2.11.3-17.45.66.1.i586",
                           product_id: "glibc-devel-2.11.3-17.45.66.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-html-2.11.3-17.45.66.1.i586",
                        product: {
                           name: "glibc-html-2.11.3-17.45.66.1.i586",
                           product_id: "glibc-html-2.11.3-17.45.66.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-i18ndata-2.11.3-17.45.66.1.i586",
                        product: {
                           name: "glibc-i18ndata-2.11.3-17.45.66.1.i586",
                           product_id: "glibc-i18ndata-2.11.3-17.45.66.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-info-2.11.3-17.45.66.1.i586",
                        product: {
                           name: "glibc-info-2.11.3-17.45.66.1.i586",
                           product_id: "glibc-info-2.11.3-17.45.66.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-locale-2.11.3-17.45.66.1.i586",
                        product: {
                           name: "glibc-locale-2.11.3-17.45.66.1.i586",
                           product_id: "glibc-locale-2.11.3-17.45.66.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-profile-2.11.3-17.45.66.1.i586",
                        product: {
                           name: "glibc-profile-2.11.3-17.45.66.1.i586",
                           product_id: "glibc-profile-2.11.3-17.45.66.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nscd-2.11.3-17.45.66.1.i586",
                        product: {
                           name: "nscd-2.11.3-17.45.66.1.i586",
                           product_id: "nscd-2.11.3-17.45.66.1.i586",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i586",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "glibc-2.11.3-17.45.66.1.i686",
                        product: {
                           name: "glibc-2.11.3-17.45.66.1.i686",
                           product_id: "glibc-2.11.3-17.45.66.1.i686",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-devel-2.11.3-17.45.66.1.i686",
                        product: {
                           name: "glibc-devel-2.11.3-17.45.66.1.i686",
                           product_id: "glibc-devel-2.11.3-17.45.66.1.i686",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i686",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "glibc-2.11.3-17.45.66.1.s390x",
                        product: {
                           name: "glibc-2.11.3-17.45.66.1.s390x",
                           product_id: "glibc-2.11.3-17.45.66.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-32bit-2.11.3-17.45.66.1.s390x",
                        product: {
                           name: "glibc-32bit-2.11.3-17.45.66.1.s390x",
                           product_id: "glibc-32bit-2.11.3-17.45.66.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-devel-2.11.3-17.45.66.1.s390x",
                        product: {
                           name: "glibc-devel-2.11.3-17.45.66.1.s390x",
                           product_id: "glibc-devel-2.11.3-17.45.66.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
                        product: {
                           name: "glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
                           product_id: "glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-html-2.11.3-17.45.66.1.s390x",
                        product: {
                           name: "glibc-html-2.11.3-17.45.66.1.s390x",
                           product_id: "glibc-html-2.11.3-17.45.66.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-i18ndata-2.11.3-17.45.66.1.s390x",
                        product: {
                           name: "glibc-i18ndata-2.11.3-17.45.66.1.s390x",
                           product_id: "glibc-i18ndata-2.11.3-17.45.66.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-info-2.11.3-17.45.66.1.s390x",
                        product: {
                           name: "glibc-info-2.11.3-17.45.66.1.s390x",
                           product_id: "glibc-info-2.11.3-17.45.66.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-locale-2.11.3-17.45.66.1.s390x",
                        product: {
                           name: "glibc-locale-2.11.3-17.45.66.1.s390x",
                           product_id: "glibc-locale-2.11.3-17.45.66.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
                        product: {
                           name: "glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
                           product_id: "glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-profile-2.11.3-17.45.66.1.s390x",
                        product: {
                           name: "glibc-profile-2.11.3-17.45.66.1.s390x",
                           product_id: "glibc-profile-2.11.3-17.45.66.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
                        product: {
                           name: "glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
                           product_id: "glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nscd-2.11.3-17.45.66.1.s390x",
                        product: {
                           name: "nscd-2.11.3-17.45.66.1.s390x",
                           product_id: "nscd-2.11.3-17.45.66.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "glibc-2.11.3-17.45.66.1.x86_64",
                        product: {
                           name: "glibc-2.11.3-17.45.66.1.x86_64",
                           product_id: "glibc-2.11.3-17.45.66.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-32bit-2.11.3-17.45.66.1.x86_64",
                        product: {
                           name: "glibc-32bit-2.11.3-17.45.66.1.x86_64",
                           product_id: "glibc-32bit-2.11.3-17.45.66.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-devel-2.11.3-17.45.66.1.x86_64",
                        product: {
                           name: "glibc-devel-2.11.3-17.45.66.1.x86_64",
                           product_id: "glibc-devel-2.11.3-17.45.66.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
                        product: {
                           name: "glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
                           product_id: "glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-html-2.11.3-17.45.66.1.x86_64",
                        product: {
                           name: "glibc-html-2.11.3-17.45.66.1.x86_64",
                           product_id: "glibc-html-2.11.3-17.45.66.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
                        product: {
                           name: "glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
                           product_id: "glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-info-2.11.3-17.45.66.1.x86_64",
                        product: {
                           name: "glibc-info-2.11.3-17.45.66.1.x86_64",
                           product_id: "glibc-info-2.11.3-17.45.66.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-locale-2.11.3-17.45.66.1.x86_64",
                        product: {
                           name: "glibc-locale-2.11.3-17.45.66.1.x86_64",
                           product_id: "glibc-locale-2.11.3-17.45.66.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
                        product: {
                           name: "glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
                           product_id: "glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-profile-2.11.3-17.45.66.1.x86_64",
                        product: {
                           name: "glibc-profile-2.11.3-17.45.66.1.x86_64",
                           product_id: "glibc-profile-2.11.3-17.45.66.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
                        product: {
                           name: "glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
                           product_id: "glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "nscd-2.11.3-17.45.66.1.x86_64",
                        product: {
                           name: "nscd-2.11.3-17.45.66.1.x86_64",
                           product_id: "nscd-2.11.3-17.45.66.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 11 SP2-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 11 SP2-LTSS",
                           product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse_sles_ltss:11:sp2",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-2.11.3-17.45.66.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
            },
            product_reference: "glibc-2.11.3-17.45.66.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-2.11.3-17.45.66.1.i686 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
            },
            product_reference: "glibc-2.11.3-17.45.66.1.i686",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-2.11.3-17.45.66.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
            },
            product_reference: "glibc-2.11.3-17.45.66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-2.11.3-17.45.66.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
            },
            product_reference: "glibc-2.11.3-17.45.66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-32bit-2.11.3-17.45.66.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
            },
            product_reference: "glibc-32bit-2.11.3-17.45.66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-32bit-2.11.3-17.45.66.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
            },
            product_reference: "glibc-32bit-2.11.3-17.45.66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-devel-2.11.3-17.45.66.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
            },
            product_reference: "glibc-devel-2.11.3-17.45.66.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-devel-2.11.3-17.45.66.1.i686 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
            },
            product_reference: "glibc-devel-2.11.3-17.45.66.1.i686",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-devel-2.11.3-17.45.66.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
            },
            product_reference: "glibc-devel-2.11.3-17.45.66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-devel-2.11.3-17.45.66.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
            },
            product_reference: "glibc-devel-2.11.3-17.45.66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-devel-32bit-2.11.3-17.45.66.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
            },
            product_reference: "glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-devel-32bit-2.11.3-17.45.66.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
            },
            product_reference: "glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-html-2.11.3-17.45.66.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
            },
            product_reference: "glibc-html-2.11.3-17.45.66.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-html-2.11.3-17.45.66.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
            },
            product_reference: "glibc-html-2.11.3-17.45.66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-html-2.11.3-17.45.66.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
            },
            product_reference: "glibc-html-2.11.3-17.45.66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-i18ndata-2.11.3-17.45.66.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
            },
            product_reference: "glibc-i18ndata-2.11.3-17.45.66.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-i18ndata-2.11.3-17.45.66.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
            },
            product_reference: "glibc-i18ndata-2.11.3-17.45.66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-i18ndata-2.11.3-17.45.66.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
            },
            product_reference: "glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-info-2.11.3-17.45.66.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
            },
            product_reference: "glibc-info-2.11.3-17.45.66.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-info-2.11.3-17.45.66.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
            },
            product_reference: "glibc-info-2.11.3-17.45.66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-info-2.11.3-17.45.66.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
            },
            product_reference: "glibc-info-2.11.3-17.45.66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-locale-2.11.3-17.45.66.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
            },
            product_reference: "glibc-locale-2.11.3-17.45.66.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-locale-2.11.3-17.45.66.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
            },
            product_reference: "glibc-locale-2.11.3-17.45.66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-locale-2.11.3-17.45.66.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
            },
            product_reference: "glibc-locale-2.11.3-17.45.66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-locale-32bit-2.11.3-17.45.66.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
            },
            product_reference: "glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-locale-32bit-2.11.3-17.45.66.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
            },
            product_reference: "glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-profile-2.11.3-17.45.66.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
            },
            product_reference: "glibc-profile-2.11.3-17.45.66.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-profile-2.11.3-17.45.66.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
            },
            product_reference: "glibc-profile-2.11.3-17.45.66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-profile-2.11.3-17.45.66.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
            },
            product_reference: "glibc-profile-2.11.3-17.45.66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-profile-32bit-2.11.3-17.45.66.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
            },
            product_reference: "glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "glibc-profile-32bit-2.11.3-17.45.66.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
            },
            product_reference: "glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "nscd-2.11.3-17.45.66.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
            },
            product_reference: "nscd-2.11.3-17.45.66.1.i586",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "nscd-2.11.3-17.45.66.1.s390x as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
            },
            product_reference: "nscd-2.11.3-17.45.66.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "nscd-2.11.3-17.45.66.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
            },
            product_reference: "nscd-2.11.3-17.45.66.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 11 SP2-LTSS",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2013-2207",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2013-2207",
            },
         ],
         notes: [
            {
               category: "general",
               text: "pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2013-2207",
               url: "https://www.suse.com/security/cve/CVE-2013-2207",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123874 for CVE-2013-2207",
               url: "https://bugzilla.suse.com/1123874",
            },
            {
               category: "external",
               summary: "SUSE Bug 830257 for CVE-2013-2207",
               url: "https://bugzilla.suse.com/830257",
            },
            {
               category: "external",
               summary: "SUSE Bug 979109 for CVE-2013-2207",
               url: "https://bugzilla.suse.com/979109",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-02-16T15:37:56Z",
               details: "moderate",
            },
         ],
         title: "CVE-2013-2207",
      },
      {
         cve: "CVE-2013-4458",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2013-4458",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.18 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of AF_INET6 address results. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1914.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2013-4458",
               url: "https://www.suse.com/security/cve/CVE-2013-4458",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123874 for CVE-2013-4458",
               url: "https://bugzilla.suse.com/1123874",
            },
            {
               category: "external",
               summary: "SUSE Bug 847227 for CVE-2013-4458",
               url: "https://bugzilla.suse.com/847227",
            },
            {
               category: "external",
               summary: "SUSE Bug 883217 for CVE-2013-4458",
               url: "https://bugzilla.suse.com/883217",
            },
            {
               category: "external",
               summary: "SUSE Bug 941444 for CVE-2013-4458",
               url: "https://bugzilla.suse.com/941444",
            },
            {
               category: "external",
               summary: "SUSE Bug 955181 for CVE-2013-4458",
               url: "https://bugzilla.suse.com/955181",
            },
            {
               category: "external",
               summary: "SUSE Bug 967023 for CVE-2013-4458",
               url: "https://bugzilla.suse.com/967023",
            },
            {
               category: "external",
               summary: "SUSE Bug 980483 for CVE-2013-4458",
               url: "https://bugzilla.suse.com/980483",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-02-16T15:37:56Z",
               details: "moderate",
            },
         ],
         title: "CVE-2013-4458",
      },
      {
         cve: "CVE-2014-8121",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2014-8121",
            },
         ],
         notes: [
            {
               category: "general",
               text: "DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service (infinite loop) by performing a look-up on a database while iterating over it, which triggers the file pointer to be reset.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2014-8121",
               url: "https://www.suse.com/security/cve/CVE-2014-8121",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123874 for CVE-2014-8121",
               url: "https://bugzilla.suse.com/1123874",
            },
            {
               category: "external",
               summary: "SUSE Bug 918187 for CVE-2014-8121",
               url: "https://bugzilla.suse.com/918187",
            },
            {
               category: "external",
               summary: "SUSE Bug 945779 for CVE-2014-8121",
               url: "https://bugzilla.suse.com/945779",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-02-16T15:37:56Z",
               details: "moderate",
            },
         ],
         title: "CVE-2014-8121",
      },
      {
         cve: "CVE-2014-9761",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2014-9761",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2014-9761",
               url: "https://www.suse.com/security/cve/CVE-2014-9761",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123874 for CVE-2014-9761",
               url: "https://bugzilla.suse.com/1123874",
            },
            {
               category: "external",
               summary: "SUSE Bug 962738 for CVE-2014-9761",
               url: "https://bugzilla.suse.com/962738",
            },
            {
               category: "external",
               summary: "SUSE Bug 986086 for CVE-2014-9761",
               url: "https://bugzilla.suse.com/986086",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-02-16T15:37:56Z",
               details: "critical",
            },
         ],
         title: "CVE-2014-9761",
      },
      {
         cve: "CVE-2015-1781",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-1781",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-1781",
               url: "https://www.suse.com/security/cve/CVE-2015-1781",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123874 for CVE-2015-1781",
               url: "https://bugzilla.suse.com/1123874",
            },
            {
               category: "external",
               summary: "SUSE Bug 927080 for CVE-2015-1781",
               url: "https://bugzilla.suse.com/927080",
            },
            {
               category: "external",
               summary: "SUSE Bug 979109 for CVE-2015-1781",
               url: "https://bugzilla.suse.com/979109",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-02-16T15:37:56Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-1781",
      },
      {
         cve: "CVE-2015-7547",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-7547",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing \"dual A/AAAA DNS queries\" and the libnss_dns.so.2 NSS module.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-7547",
               url: "https://www.suse.com/security/cve/CVE-2015-7547",
            },
            {
               category: "external",
               summary: "SUSE Bug 1077097 for CVE-2015-7547",
               url: "https://bugzilla.suse.com/1077097",
            },
            {
               category: "external",
               summary: "SUSE Bug 847227 for CVE-2015-7547",
               url: "https://bugzilla.suse.com/847227",
            },
            {
               category: "external",
               summary: "SUSE Bug 961721 for CVE-2015-7547",
               url: "https://bugzilla.suse.com/961721",
            },
            {
               category: "external",
               summary: "SUSE Bug 967023 for CVE-2015-7547",
               url: "https://bugzilla.suse.com/967023",
            },
            {
               category: "external",
               summary: "SUSE Bug 967061 for CVE-2015-7547",
               url: "https://bugzilla.suse.com/967061",
            },
            {
               category: "external",
               summary: "SUSE Bug 967072 for CVE-2015-7547",
               url: "https://bugzilla.suse.com/967072",
            },
            {
               category: "external",
               summary: "SUSE Bug 967496 for CVE-2015-7547",
               url: "https://bugzilla.suse.com/967496",
            },
            {
               category: "external",
               summary: "SUSE Bug 969216 for CVE-2015-7547",
               url: "https://bugzilla.suse.com/969216",
            },
            {
               category: "external",
               summary: "SUSE Bug 969241 for CVE-2015-7547",
               url: "https://bugzilla.suse.com/969241",
            },
            {
               category: "external",
               summary: "SUSE Bug 969591 for CVE-2015-7547",
               url: "https://bugzilla.suse.com/969591",
            },
            {
               category: "external",
               summary: "SUSE Bug 986086 for CVE-2015-7547",
               url: "https://bugzilla.suse.com/986086",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-02-16T15:37:56Z",
               details: "important",
            },
         ],
         title: "CVE-2015-7547",
      },
      {
         cve: "CVE-2015-8776",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8776",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive information via an out-of-range time value.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8776",
               url: "https://www.suse.com/security/cve/CVE-2015-8776",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123874 for CVE-2015-8776",
               url: "https://bugzilla.suse.com/1123874",
            },
            {
               category: "external",
               summary: "SUSE Bug 962736 for CVE-2015-8776",
               url: "https://bugzilla.suse.com/962736",
            },
            {
               category: "external",
               summary: "SUSE Bug 986086 for CVE-2015-8776",
               url: "https://bugzilla.suse.com/986086",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-02-16T15:37:56Z",
               details: "low",
            },
         ],
         title: "CVE-2015-8776",
      },
      {
         cve: "CVE-2015-8777",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8777",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LD_POINTER_GUARD environment variable.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8777",
               url: "https://www.suse.com/security/cve/CVE-2015-8777",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123874 for CVE-2015-8777",
               url: "https://bugzilla.suse.com/1123874",
            },
            {
               category: "external",
               summary: "SUSE Bug 950944 for CVE-2015-8777",
               url: "https://bugzilla.suse.com/950944",
            },
            {
               category: "external",
               summary: "SUSE Bug 962735 for CVE-2015-8777",
               url: "https://bugzilla.suse.com/962735",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-02-16T15:37:56Z",
               details: "low",
            },
         ],
         title: "CVE-2015-8777",
      },
      {
         cve: "CVE-2015-8778",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8778",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the size argument to the __hcreate_r function, which triggers out-of-bounds heap-memory access.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8778",
               url: "https://www.suse.com/security/cve/CVE-2015-8778",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123874 for CVE-2015-8778",
               url: "https://bugzilla.suse.com/1123874",
            },
            {
               category: "external",
               summary: "SUSE Bug 962737 for CVE-2015-8778",
               url: "https://bugzilla.suse.com/962737",
            },
            {
               category: "external",
               summary: "SUSE Bug 986086 for CVE-2015-8778",
               url: "https://bugzilla.suse.com/986086",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-02-16T15:37:56Z",
               details: "low",
            },
         ],
         title: "CVE-2015-8778",
      },
      {
         cve: "CVE-2015-8779",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-8779",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
               "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-8779",
               url: "https://www.suse.com/security/cve/CVE-2015-8779",
            },
            {
               category: "external",
               summary: "SUSE Bug 1123874 for CVE-2015-8779",
               url: "https://bugzilla.suse.com/1123874",
            },
            {
               category: "external",
               summary: "SUSE Bug 962739 for CVE-2015-8779",
               url: "https://bugzilla.suse.com/962739",
            },
            {
               category: "external",
               summary: "SUSE Bug 965453 for CVE-2015-8779",
               url: "https://bugzilla.suse.com/965453",
            },
            {
               category: "external",
               summary: "SUSE Bug 986086 for CVE-2015-8779",
               url: "https://bugzilla.suse.com/986086",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.i686",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-devel-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-html-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-i18ndata-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-info-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-locale-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:glibc-profile-32bit-2.11.3-17.45.66.1.x86_64",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.i586",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.s390x",
                  "SUSE Linux Enterprise Server 11 SP2-LTSS:nscd-2.11.3-17.45.66.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2016-02-16T15:37:56Z",
               details: "important",
            },
         ],
         title: "CVE-2015-8779",
      },
   ],
}

cve-2015-1781

Vulnerability from cvelistv5

Published

2015-09-28 20:00

Modified

2024-08-06 04:54

Severity ?

Summary

Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html	vendor-advisory, x_refsource_SUSE
	https://www.sourceware.org/ml/libc-alpha/2015-08/msg00609.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2985-2	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201602-02	vendor-advisory, x_refsource_GENTOO
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html	x_refsource_CONFIRM
	https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=2959eda9272a03386	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html	vendor-advisory, x_refsource_FEDORA
	https://rhn.redhat.com/errata/RHSA-2015-0863.html	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2016/dsa-3480	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2985-1	vendor-advisory, x_refsource_UBUNTU
	https://sourceware.org/bugzilla/show_bug.cgi?id=18287	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1032178	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/74255	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T04:54:15.984Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "SUSE-SU-2015:1424",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html",
               },
               {
                  name: "[libc-alpha] 20150814 The GNU C Library version 2.22 is now available",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://www.sourceware.org/ml/libc-alpha/2015-08/msg00609.html",
               },
               {
                  name: "SUSE-SU-2016:0470",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
               },
               {
                  name: "USN-2985-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2985-2",
               },
               {
                  name: "GLSA-201602-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201602-02",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=2959eda9272a03386",
               },
               {
                  name: "FEDORA-2016-0480defc94",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html",
               },
               {
                  name: "RHSA-2015:0863",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://rhn.redhat.com/errata/RHSA-2015-0863.html",
               },
               {
                  name: "DSA-3480",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3480",
               },
               {
                  name: "USN-2985-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2985-1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://sourceware.org/bugzilla/show_bug.cgi?id=18287",
               },
               {
                  name: "1032178",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1032178",
               },
               {
                  name: "74255",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/74255",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-04-21T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Buffer overflow in the gethostbyname_r and other unspecified NSS functions in the GNU C Library (aka glibc or libc6) before 2.22 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response, which triggers a call with a misaligned buffer.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2016-12-02T20:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "SUSE-SU-2015:1424",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html",
            },
            {
               name: "[libc-alpha] 20150814 The GNU C Library version 2.22 is now available",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://www.sourceware.org/ml/libc-alpha/2015-08/msg00609.html",
            },
            {
               name: "SUSE-SU-2016:0470",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
            },
            {
               name: "USN-2985-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2985-2",
            },
            {
               name: "GLSA-201602-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201602-02",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=2959eda9272a03386",
            },
            {
               name: "FEDORA-2016-0480defc94",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html",
            },
            {
               name: "RHSA-2015:0863",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://rhn.redhat.com/errata/RHSA-2015-0863.html",
            },
            {
               name: "DSA-3480",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3480",
            },
            {
               name: "USN-2985-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2985-1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://sourceware.org/bugzilla/show_bug.cgi?id=18287",
            },
            {
               name: "1032178",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1032178",
            },
            {
               name: "74255",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/74255",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2015-1781",
      datePublished: "2015-09-28T20:00:00",
      dateReserved: "2015-02-17T00:00:00",
      dateUpdated: "2024-08-06T04:54:15.984Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2014-8121

Vulnerability from cvelistv5

Published

2015-03-27 14:00

Modified

2024-08-06 13:10

Severity ?

Summary

DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service (infinite loop) by performing a look-up on a database while iterating over it, which triggers the file pointer to be reset.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html	vendor-advisory, x_refsource_SUSE
	https://bugzilla.redhat.com/show_bug.cgi?id=1165192	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2985-2	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201602-02	vendor-advisory, x_refsource_GENTOO
	https://sourceware.org/ml/libc-alpha/2015-02/msg00617.html	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2015-0327.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/73038	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2016/dsa-3480	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2985-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T13:10:50.918Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "SUSE-SU-2015:1424",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1165192",
               },
               {
                  name: "SUSE-SU-2016:0470",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
               },
               {
                  name: "USN-2985-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2985-2",
               },
               {
                  name: "GLSA-201602-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201602-02",
               },
               {
                  name: "[libc-alpha] 20150223 [PATCH] CVE-2014-8121: Fix nss_files file management [BZ#18007]",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://sourceware.org/ml/libc-alpha/2015-02/msg00617.html",
               },
               {
                  name: "RHSA-2015:0327",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-0327.html",
               },
               {
                  name: "73038",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/73038",
               },
               {
                  name: "DSA-3480",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3480",
               },
               {
                  name: "USN-2985-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2985-1",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-02-23T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file is open, which allows remote attackers to cause a denial of service (infinite loop) by performing a look-up on a database while iterating over it, which triggers the file pointer to be reset.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2016-11-30T18:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "SUSE-SU-2015:1424",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1165192",
            },
            {
               name: "SUSE-SU-2016:0470",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
            },
            {
               name: "USN-2985-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2985-2",
            },
            {
               name: "GLSA-201602-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201602-02",
            },
            {
               name: "[libc-alpha] 20150223 [PATCH] CVE-2014-8121: Fix nss_files file management [BZ#18007]",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://sourceware.org/ml/libc-alpha/2015-02/msg00617.html",
            },
            {
               name: "RHSA-2015:0327",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-0327.html",
            },
            {
               name: "73038",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/73038",
            },
            {
               name: "DSA-3480",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3480",
            },
            {
               name: "USN-2985-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2985-1",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2014-8121",
      datePublished: "2015-03-27T14:00:00",
      dateReserved: "2014-10-10T00:00:00",
      dateUpdated: "2024-08-06T13:10:50.918Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8778

Vulnerability from cvelistv5

Published

2016-04-19 21:00

Modified

2024-08-06 08:29

Severity ?

Summary

Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the size argument to the __hcreate_r function, which triggers out-of-bounds heap-memory access.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html	vendor-advisory, x_refsource_SUSE
	http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html	vendor-advisory, x_refsource_FEDORA
	https://access.redhat.com/errata/RHSA-2017:1916	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2016/dsa-3481	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html	vendor-advisory, x_refsource_SUSE
	https://sourceware.org/bugzilla/show_bug.cgi?id=18240	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2017-0680.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2985-2	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2016/01/20/1	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201702-11	vendor-advisory, x_refsource_GENTOO
	https://security.gentoo.org/glsa/201602-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html	vendor-advisory, x_refsource_SUSE
	https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/01/19/11	mailing-list, x_refsource_MLIST
	http://www.debian.org/security/2016/dsa-3480	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2985-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/83275	vdb-entry, x_refsource_BID
	http://seclists.org/fulldisclosure/2019/Sep/7	mailing-list, x_refsource_FULLDISC
	https://seclists.org/bugtraq/2019/Sep/7	mailing-list, x_refsource_BUGTRAQ
	http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:29:21.859Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "SUSE-SU-2016:0471",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html",
               },
               {
                  name: "FEDORA-2016-68abc0be35",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html",
               },
               {
                  name: "RHSA-2017:1916",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:1916",
               },
               {
                  name: "DSA-3481",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3481",
               },
               {
                  name: "openSUSE-SU-2016:0510",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://sourceware.org/bugzilla/show_bug.cgi?id=18240",
               },
               {
                  name: "SUSE-SU-2016:0470",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
               },
               {
                  name: "RHSA-2017:0680",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2017-0680.html",
               },
               {
                  name: "USN-2985-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2985-2",
               },
               {
                  name: "[oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/01/20/1",
               },
               {
                  name: "GLSA-201702-11",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201702-11",
               },
               {
                  name: "GLSA-201602-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201602-02",
               },
               {
                  name: "SUSE-SU-2016:0472",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html",
               },
               {
                  name: "SUSE-SU-2016:0473",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html",
               },
               {
                  name: "[libc-alpha] 20160219 The GNU C Library version 2.23 is now available",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html",
               },
               {
                  name: "[oss-security] 20160119 CVE assignment request for security bugs fixed in glibc 2.23",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/01/19/11",
               },
               {
                  name: "DSA-3480",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3480",
               },
               {
                  name: "USN-2985-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2985-1",
               },
               {
                  name: "83275",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/83275",
               },
               {
                  name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2019/Sep/7",
               },
               {
                  name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "https://seclists.org/bugtraq/2019/Sep/7",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-01-19T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the size argument to the __hcreate_r function, which triggers out-of-bounds heap-memory access.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2019-09-05T01:06:08",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "SUSE-SU-2016:0471",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html",
            },
            {
               name: "FEDORA-2016-68abc0be35",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html",
            },
            {
               name: "RHSA-2017:1916",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:1916",
            },
            {
               name: "DSA-3481",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3481",
            },
            {
               name: "openSUSE-SU-2016:0510",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://sourceware.org/bugzilla/show_bug.cgi?id=18240",
            },
            {
               name: "SUSE-SU-2016:0470",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
            },
            {
               name: "RHSA-2017:0680",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2017-0680.html",
            },
            {
               name: "USN-2985-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2985-2",
            },
            {
               name: "[oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/01/20/1",
            },
            {
               name: "GLSA-201702-11",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201702-11",
            },
            {
               name: "GLSA-201602-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201602-02",
            },
            {
               name: "SUSE-SU-2016:0472",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html",
            },
            {
               name: "SUSE-SU-2016:0473",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html",
            },
            {
               name: "[libc-alpha] 20160219 The GNU C Library version 2.23 is now available",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html",
            },
            {
               name: "[oss-security] 20160119 CVE assignment request for security bugs fixed in glibc 2.23",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/01/19/11",
            },
            {
               name: "DSA-3480",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3480",
            },
            {
               name: "USN-2985-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2985-1",
            },
            {
               name: "83275",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/83275",
            },
            {
               name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2019/Sep/7",
            },
            {
               name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "https://seclists.org/bugtraq/2019/Sep/7",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2015-8778",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the size argument to the __hcreate_r function, which triggers out-of-bounds heap-memory access.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "SUSE-SU-2016:0471",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html",
                  },
                  {
                     name: "FEDORA-2016-68abc0be35",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html",
                  },
                  {
                     name: "RHSA-2017:1916",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2017:1916",
                  },
                  {
                     name: "DSA-3481",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3481",
                  },
                  {
                     name: "openSUSE-SU-2016:0510",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html",
                  },
                  {
                     name: "https://sourceware.org/bugzilla/show_bug.cgi?id=18240",
                     refsource: "CONFIRM",
                     url: "https://sourceware.org/bugzilla/show_bug.cgi?id=18240",
                  },
                  {
                     name: "SUSE-SU-2016:0470",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
                  },
                  {
                     name: "RHSA-2017:0680",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2017-0680.html",
                  },
                  {
                     name: "USN-2985-2",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2985-2",
                  },
                  {
                     name: "[oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/01/20/1",
                  },
                  {
                     name: "GLSA-201702-11",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201702-11",
                  },
                  {
                     name: "GLSA-201602-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201602-02",
                  },
                  {
                     name: "SUSE-SU-2016:0472",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html",
                  },
                  {
                     name: "SUSE-SU-2016:0473",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html",
                  },
                  {
                     name: "[libc-alpha] 20160219 The GNU C Library version 2.23 is now available",
                     refsource: "MLIST",
                     url: "https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html",
                  },
                  {
                     name: "[oss-security] 20160119 CVE assignment request for security bugs fixed in glibc 2.23",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/01/19/11",
                  },
                  {
                     name: "DSA-3480",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3480",
                  },
                  {
                     name: "USN-2985-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2985-1",
                  },
                  {
                     name: "83275",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/83275",
                  },
                  {
                     name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2019/Sep/7",
                  },
                  {
                     name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
                     refsource: "BUGTRAQ",
                     url: "https://seclists.org/bugtraq/2019/Sep/7",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2015-8778",
      datePublished: "2016-04-19T21:00:00",
      dateReserved: "2016-01-19T00:00:00",
      dateUpdated: "2024-08-06T08:29:21.859Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2014-9761

Vulnerability from cvelistv5

Published

2016-04-19 21:00

Modified

2024-08-06 13:55

Severity ?

Summary

Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html	vendor-advisory, x_refsource_SUSE
	http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html	vendor-advisory, x_refsource_FEDORA
	https://access.redhat.com/errata/RHSA-2017:1916	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2017-0680.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2985-2	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2016/01/20/1	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201702-11	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html	vendor-advisory, x_refsource_SUSE
	https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/01/19/11	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/83306	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/USN-2985-1	vendor-advisory, x_refsource_UBUNTU
	https://sourceware.org/bugzilla/show_bug.cgi?id=16962	x_refsource_CONFIRM
	http://seclists.org/fulldisclosure/2019/Jun/18	mailing-list, x_refsource_FULLDISC
	https://seclists.org/bugtraq/2019/Jun/14	mailing-list, x_refsource_BUGTRAQ
	http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html	x_refsource_MISC
	http://seclists.org/fulldisclosure/2019/Sep/7	mailing-list, x_refsource_FULLDISC
	https://seclists.org/bugtraq/2019/Sep/7	mailing-list, x_refsource_BUGTRAQ
	http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T13:55:04.586Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "SUSE-SU-2016:0471",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html",
               },
               {
                  name: "FEDORA-2016-68abc0be35",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html",
               },
               {
                  name: "RHSA-2017:1916",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:1916",
               },
               {
                  name: "openSUSE-SU-2016:0510",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html",
               },
               {
                  name: "SUSE-SU-2016:0470",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
               },
               {
                  name: "RHSA-2017:0680",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2017-0680.html",
               },
               {
                  name: "USN-2985-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2985-2",
               },
               {
                  name: "[oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/01/20/1",
               },
               {
                  name: "GLSA-201702-11",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201702-11",
               },
               {
                  name: "SUSE-SU-2016:0472",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html",
               },
               {
                  name: "SUSE-SU-2016:0473",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html",
               },
               {
                  name: "[libc-alpha] 20160219 The GNU C Library version 2.23 is now available",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html",
               },
               {
                  name: "[oss-security] 20160119 CVE assignment request for security bugs fixed in glibc 2.23",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/01/19/11",
               },
               {
                  name: "83306",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/83306",
               },
               {
                  name: "USN-2985-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2985-1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://sourceware.org/bugzilla/show_bug.cgi?id=16962",
               },
               {
                  name: "20190612 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2019/Jun/18",
               },
               {
                  name: "20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "https://seclists.org/bugtraq/2019/Jun/14",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html",
               },
               {
                  name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2019/Sep/7",
               },
               {
                  name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "https://seclists.org/bugtraq/2019/Sep/7",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-01-19T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2019-09-05T01:06:06",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "SUSE-SU-2016:0471",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html",
            },
            {
               name: "FEDORA-2016-68abc0be35",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html",
            },
            {
               name: "RHSA-2017:1916",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:1916",
            },
            {
               name: "openSUSE-SU-2016:0510",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html",
            },
            {
               name: "SUSE-SU-2016:0470",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
            },
            {
               name: "RHSA-2017:0680",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2017-0680.html",
            },
            {
               name: "USN-2985-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2985-2",
            },
            {
               name: "[oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/01/20/1",
            },
            {
               name: "GLSA-201702-11",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201702-11",
            },
            {
               name: "SUSE-SU-2016:0472",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html",
            },
            {
               name: "SUSE-SU-2016:0473",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html",
            },
            {
               name: "[libc-alpha] 20160219 The GNU C Library version 2.23 is now available",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html",
            },
            {
               name: "[oss-security] 20160119 CVE assignment request for security bugs fixed in glibc 2.23",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/01/19/11",
            },
            {
               name: "83306",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/83306",
            },
            {
               name: "USN-2985-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2985-1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://sourceware.org/bugzilla/show_bug.cgi?id=16962",
            },
            {
               name: "20190612 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2019/Jun/18",
            },
            {
               name: "20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "https://seclists.org/bugtraq/2019/Jun/14",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html",
            },
            {
               name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2019/Sep/7",
            },
            {
               name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "https://seclists.org/bugtraq/2019/Sep/7",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2014-9761",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "SUSE-SU-2016:0471",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html",
                  },
                  {
                     name: "FEDORA-2016-68abc0be35",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html",
                  },
                  {
                     name: "RHSA-2017:1916",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2017:1916",
                  },
                  {
                     name: "openSUSE-SU-2016:0510",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html",
                  },
                  {
                     name: "SUSE-SU-2016:0470",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
                  },
                  {
                     name: "RHSA-2017:0680",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2017-0680.html",
                  },
                  {
                     name: "USN-2985-2",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2985-2",
                  },
                  {
                     name: "[oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/01/20/1",
                  },
                  {
                     name: "GLSA-201702-11",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201702-11",
                  },
                  {
                     name: "SUSE-SU-2016:0472",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html",
                  },
                  {
                     name: "SUSE-SU-2016:0473",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html",
                  },
                  {
                     name: "[libc-alpha] 20160219 The GNU C Library version 2.23 is now available",
                     refsource: "MLIST",
                     url: "https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html",
                  },
                  {
                     name: "[oss-security] 20160119 CVE assignment request for security bugs fixed in glibc 2.23",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/01/19/11",
                  },
                  {
                     name: "83306",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/83306",
                  },
                  {
                     name: "USN-2985-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2985-1",
                  },
                  {
                     name: "https://sourceware.org/bugzilla/show_bug.cgi?id=16962",
                     refsource: "CONFIRM",
                     url: "https://sourceware.org/bugzilla/show_bug.cgi?id=16962",
                  },
                  {
                     name: "20190612 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2019/Jun/18",
                  },
                  {
                     name: "20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series",
                     refsource: "BUGTRAQ",
                     url: "https://seclists.org/bugtraq/2019/Jun/14",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html",
                  },
                  {
                     name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2019/Sep/7",
                  },
                  {
                     name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
                     refsource: "BUGTRAQ",
                     url: "https://seclists.org/bugtraq/2019/Sep/7",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2014-9761",
      datePublished: "2016-04-19T21:00:00",
      dateReserved: "2016-01-19T00:00:00",
      dateUpdated: "2024-08-06T13:55:04.586Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8777

Vulnerability from cvelistv5

Published

2016-01-20 02:00

Modified

2024-08-06 08:29

Severity ?

Summary

The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LD_POINTER_GUARD environment variable.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2017:1916	vendor-advisory, x_refsource_REDHAT
	http://hmarco.org/bugs/glibc_ptr_mangle_weakness.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2985-2	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2016/01/20/1	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201702-11	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/81469	vdb-entry, x_refsource_BID
	https://sourceware.org/bugzilla/show_bug.cgi?id=18928	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html	vendor-advisory, x_refsource_FEDORA
	http://www.debian.org/security/2016/dsa-3480	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2985-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securitytracker.com/id/1034811	vdb-entry, x_refsource_SECTRACK

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:29:21.801Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "SUSE-SU-2016:0471",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html",
               },
               {
                  name: "RHSA-2017:1916",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:1916",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://hmarco.org/bugs/glibc_ptr_mangle_weakness.html",
               },
               {
                  name: "SUSE-SU-2016:0470",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
               },
               {
                  name: "USN-2985-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2985-2",
               },
               {
                  name: "[oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/01/20/1",
               },
               {
                  name: "GLSA-201702-11",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201702-11",
               },
               {
                  name: "SUSE-SU-2016:0472",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html",
               },
               {
                  name: "SUSE-SU-2016:0473",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html",
               },
               {
                  name: "81469",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/81469",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://sourceware.org/bugzilla/show_bug.cgi?id=18928",
               },
               {
                  name: "FEDORA-2016-0480defc94",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html",
               },
               {
                  name: "DSA-3480",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3480",
               },
               {
                  name: "USN-2985-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2985-1",
               },
               {
                  name: "1034811",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1034811",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-09-05T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The process_envvars function in elf/rtld.c in the GNU C Library (aka glibc or libc6) before 2.23 allows local users to bypass a pointer-guarding protection mechanism via a zero value of the LD_POINTER_GUARD environment variable.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-04T19:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "SUSE-SU-2016:0471",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html",
            },
            {
               name: "RHSA-2017:1916",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:1916",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://hmarco.org/bugs/glibc_ptr_mangle_weakness.html",
            },
            {
               name: "SUSE-SU-2016:0470",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
            },
            {
               name: "USN-2985-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2985-2",
            },
            {
               name: "[oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/01/20/1",
            },
            {
               name: "GLSA-201702-11",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201702-11",
            },
            {
               name: "SUSE-SU-2016:0472",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html",
            },
            {
               name: "SUSE-SU-2016:0473",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html",
            },
            {
               name: "81469",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/81469",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://sourceware.org/bugzilla/show_bug.cgi?id=18928",
            },
            {
               name: "FEDORA-2016-0480defc94",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html",
            },
            {
               name: "DSA-3480",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3480",
            },
            {
               name: "USN-2985-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2985-1",
            },
            {
               name: "1034811",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1034811",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2015-8777",
      datePublished: "2016-01-20T02:00:00",
      dateReserved: "2016-01-19T00:00:00",
      dateUpdated: "2024-08-06T08:29:21.801Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-7547

Vulnerability from cvelistv5

Published

2016-02-18 21:00

Modified

2024-08-06 07:51

Severity ?

Summary

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1035020	vdb-entry, x_refsource_SECTRACK
	http://marc.info/?l=bugtraq&m=146161017210491&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2016-0175.html	vendor-advisory, x_refsource_REDHAT
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05140858	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05125672	x_refsource_CONFIRM
	https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/	x_refsource_CONFIRM
	https://sourceware.org/bugzilla/show_bug.cgi?id=18665	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=145857691004892&w=2	vendor-advisory, x_refsource_HP
	http://rhn.redhat.com/errata/RHSA-2016-0225.html	vendor-advisory, x_refsource_REDHAT
	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177412.html	vendor-advisory, x_refsource_FEDORA
	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40161	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3481	vendor-advisory, x_refsource_DEBIAN
	http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://ubuntu.com/usn/usn-2900-1	vendor-advisory, x_refsource_UBUNTU
	http://www.fortiguard.com/advisory/glibc-getaddrinfo-stack-overflow	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-0277.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00043.html	vendor-advisory, x_refsource_SUSE
	https://googleonlinesecurity.blogspot.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html	x_refsource_MISC
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
	https://security.netapp.com/advisory/ntap-20160217-0002/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html	vendor-advisory, x_refsource_SUSE
	https://blogs.sophos.com/2016/02/24/utm-up2date-9-355-released/	x_refsource_CONFIRM
	https://support.lenovo.com/us/en/product_security/len_5450	x_refsource_CONFIRM
	https://www.tenable.com/security/research/tra-2017-08	x_refsource_MISC
	http://www.vmware.com/security/advisories/VMSA-2016-0002.html	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=145672440608228&w=2	vendor-advisory, x_refsource_HP
	http://www.securityfocus.com/bid/83265	vdb-entry, x_refsource_BID
	http://fortiguard.com/advisory/glibc-getaddrinfo-stack-overflow	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201602-02	vendor-advisory, x_refsource_GENTOO
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128937	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=145596041017029&w=2	vendor-advisory, x_refsource_HP
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://www.exploit-db.com/exploits/40339/	exploit, x_refsource_EXPLOIT-DB
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05098877	x_refsource_CONFIRM
	https://bto.bluecoat.com/security-advisory/sa114	x_refsource_CONFIRM
	https://sourceware.org/ml/libc-alpha/2016-02/msg00416.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html	vendor-advisory, x_refsource_SUSE
	https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes	x_refsource_CONFIRM
	http://packetstormsecurity.com/files/135802/glibc-getaddrinfo-Stack-Based-Buffer-Overflow.html	x_refsource_MISC
	https://bugzilla.redhat.com/show_bug.cgi?id=1293532	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05008367	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176716	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05053211	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05028479	x_refsource_CONFIRM
	https://support.f5.com/kb/en-us/solutions/public/k/47/sol47098834.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-0176.html	vendor-advisory, x_refsource_REDHAT
	http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00044.html	vendor-advisory, x_refsource_SUSE
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04989404	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3480	vendor-advisory, x_refsource_DEBIAN
	https://ics-cert.us-cert.gov/advisories/ICSA-16-103-01	x_refsource_MISC
	https://www.exploit-db.com/exploits/39454/	exploit, x_refsource_EXPLOIT-DB
	http://support.citrix.com/article/CTX206991	x_refsource_CONFIRM
	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160304-01-glibc-en	x_refsource_CONFIRM
	https://www.kb.cert.org/vuls/id/457759	third-party-advisory, x_refsource_CERT-VN
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05130958	x_refsource_CONFIRM
	https://access.redhat.com/articles/2161461	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10150	x_refsource_CONFIRM
	http://marc.info/?l=bugtraq&m=145690841819314&w=2	vendor-advisory, x_refsource_HP
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05212266	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073516	x_refsource_CONFIRM
	http://seclists.org/fulldisclosure/2019/Sep/7	mailing-list, x_refsource_FULLDISC
	https://seclists.org/bugtraq/2019/Sep/7	mailing-list, x_refsource_BUGTRAQ
	http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html	x_refsource_MISC
	http://seclists.org/fulldisclosure/2021/Sep/0	mailing-list, x_refsource_FULLDISC
	http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html	x_refsource_MISC
	https://www.arista.com/en/support/advisories-notices/security-advisories/1255-security-advisory-17	x_refsource_MISC
	http://seclists.org/fulldisclosure/2022/Jun/36	mailing-list, x_refsource_FULLDISC
	http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T07:51:28.440Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "1035020",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1035020",
               },
               {
                  name: "HPSBGN03582",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=146161017210491&w=2",
               },
               {
                  name: "SUSE-SU-2016:0471",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html",
               },
               {
                  name: "RHSA-2016:0175",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-0175.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05140858",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05125672",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://sourceware.org/bugzilla/show_bug.cgi?id=18665",
               },
               {
                  name: "HPSBGN03551",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=145857691004892&w=2",
               },
               {
                  name: "RHSA-2016:0225",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-0225.html",
               },
               {
                  name: "FEDORA-2016-0f9e9a34ce",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177412.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40161",
               },
               {
                  name: "DSA-3481",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3481",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
               },
               {
                  name: "openSUSE-SU-2016:0510",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html",
               },
               {
                  name: "USN-2900-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://ubuntu.com/usn/usn-2900-1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.fortiguard.com/advisory/glibc-getaddrinfo-stack-overflow",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917",
               },
               {
                  name: "RHSA-2016:0277",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-0277.html",
               },
               {
                  name: "openSUSE-SU-2016:0511",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00043.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://googleonlinesecurity.blogspot.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20160217-0002/",
               },
               {
                  name: "SUSE-SU-2016:0470",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://blogs.sophos.com/2016/02/24/utm-up2date-9-355-released/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.lenovo.com/us/en/product_security/len_5450",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.tenable.com/security/research/tra-2017-08",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.vmware.com/security/advisories/VMSA-2016-0002.html",
               },
               {
                  name: "HPSBGN03549",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=145672440608228&w=2",
               },
               {
                  name: "83265",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/83265",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://fortiguard.com/advisory/glibc-getaddrinfo-stack-overflow",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380",
               },
               {
                  name: "GLSA-201602-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201602-02",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128937",
               },
               {
                  name: "HPSBGN03547",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=145596041017029&w=2",
               },
               {
                  name: "SUSE-SU-2016:0472",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html",
               },
               {
                  name: "40339",
                  tags: [
                     "exploit",
                     "x_refsource_EXPLOIT-DB",
                     "x_transferred",
                  ],
                  url: "https://www.exploit-db.com/exploits/40339/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05098877",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa114",
               },
               {
                  name: "[libc-alpha] 20160216 [PATCH] CVE-2015-7547 --- glibc getaddrinfo() stack-based buffer overflow",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://sourceware.org/ml/libc-alpha/2016-02/msg00416.html",
               },
               {
                  name: "SUSE-SU-2016:0473",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/135802/glibc-getaddrinfo-Stack-Based-Buffer-Overflow.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1293532",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05008367",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176716",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05053211",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05028479",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.f5.com/kb/en-us/solutions/public/k/47/sol47098834.html",
               },
               {
                  name: "RHSA-2016:0176",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-0176.html",
               },
               {
                  name: "FEDORA-2016-0480defc94",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html",
               },
               {
                  name: "openSUSE-SU-2016:0512",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00044.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04989404",
               },
               {
                  name: "DSA-3480",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3480",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://ics-cert.us-cert.gov/advisories/ICSA-16-103-01",
               },
               {
                  name: "39454",
                  tags: [
                     "exploit",
                     "x_refsource_EXPLOIT-DB",
                     "x_transferred",
                  ],
                  url: "https://www.exploit-db.com/exploits/39454/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://support.citrix.com/article/CTX206991",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160304-01-glibc-en",
               },
               {
                  name: "VU#457759",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_CERT-VN",
                     "x_transferred",
                  ],
                  url: "https://www.kb.cert.org/vuls/id/457759",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05130958",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/articles/2161461",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10150",
               },
               {
                  name: "HPSBGN03442",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_HP",
                     "x_transferred",
                  ],
                  url: "http://marc.info/?l=bugtraq&m=145690841819314&w=2",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05212266",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073516",
               },
               {
                  name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2019/Sep/7",
               },
               {
                  name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "https://seclists.org/bugtraq/2019/Sep/7",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
               },
               {
                  name: "20210901 SEC Consult SA-20210901-0 :: Multiple vulnerabilities in MOXA devices",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2021/Sep/0",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.arista.com/en/support/advisories-notices/security-advisories/1255-security-advisory-17",
               },
               {
                  name: "20220617 SEC Consult SA-20220615-0 :: Hardcoded Backdoor User and Outdated Software Components in Nexans FTTO GigaSwitch series",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2022/Jun/36",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-07-13T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing \"dual A/AAAA DNS queries\" and the libnss_dns.so.2 NSS module.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-06-20T18:06:34",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "1035020",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1035020",
            },
            {
               name: "HPSBGN03582",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=146161017210491&w=2",
            },
            {
               name: "SUSE-SU-2016:0471",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html",
            },
            {
               name: "RHSA-2016:0175",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-0175.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05140858",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05125672",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://sourceware.org/bugzilla/show_bug.cgi?id=18665",
            },
            {
               name: "HPSBGN03551",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=145857691004892&w=2",
            },
            {
               name: "RHSA-2016:0225",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-0225.html",
            },
            {
               name: "FEDORA-2016-0f9e9a34ce",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177412.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40161",
            },
            {
               name: "DSA-3481",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3481",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
            },
            {
               name: "openSUSE-SU-2016:0510",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html",
            },
            {
               name: "USN-2900-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://ubuntu.com/usn/usn-2900-1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.fortiguard.com/advisory/glibc-getaddrinfo-stack-overflow",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917",
            },
            {
               name: "RHSA-2016:0277",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-0277.html",
            },
            {
               name: "openSUSE-SU-2016:0511",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00043.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://googleonlinesecurity.blogspot.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20160217-0002/",
            },
            {
               name: "SUSE-SU-2016:0470",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://blogs.sophos.com/2016/02/24/utm-up2date-9-355-released/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.lenovo.com/us/en/product_security/len_5450",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.tenable.com/security/research/tra-2017-08",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.vmware.com/security/advisories/VMSA-2016-0002.html",
            },
            {
               name: "HPSBGN03549",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=145672440608228&w=2",
            },
            {
               name: "83265",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/83265",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://fortiguard.com/advisory/glibc-getaddrinfo-stack-overflow",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380",
            },
            {
               name: "GLSA-201602-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201602-02",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128937",
            },
            {
               name: "HPSBGN03547",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=145596041017029&w=2",
            },
            {
               name: "SUSE-SU-2016:0472",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html",
            },
            {
               name: "40339",
               tags: [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
               ],
               url: "https://www.exploit-db.com/exploits/40339/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05098877",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa114",
            },
            {
               name: "[libc-alpha] 20160216 [PATCH] CVE-2015-7547 --- glibc getaddrinfo() stack-based buffer overflow",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://sourceware.org/ml/libc-alpha/2016-02/msg00416.html",
            },
            {
               name: "SUSE-SU-2016:0473",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/135802/glibc-getaddrinfo-Stack-Based-Buffer-Overflow.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1293532",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05008367",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176716",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05053211",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05028479",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.f5.com/kb/en-us/solutions/public/k/47/sol47098834.html",
            },
            {
               name: "RHSA-2016:0176",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-0176.html",
            },
            {
               name: "FEDORA-2016-0480defc94",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html",
            },
            {
               name: "openSUSE-SU-2016:0512",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00044.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04989404",
            },
            {
               name: "DSA-3480",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3480",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://ics-cert.us-cert.gov/advisories/ICSA-16-103-01",
            },
            {
               name: "39454",
               tags: [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
               ],
               url: "https://www.exploit-db.com/exploits/39454/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://support.citrix.com/article/CTX206991",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160304-01-glibc-en",
            },
            {
               name: "VU#457759",
               tags: [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
               ],
               url: "https://www.kb.cert.org/vuls/id/457759",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05130958",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://access.redhat.com/articles/2161461",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10150",
            },
            {
               name: "HPSBGN03442",
               tags: [
                  "vendor-advisory",
                  "x_refsource_HP",
               ],
               url: "http://marc.info/?l=bugtraq&m=145690841819314&w=2",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05212266",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073516",
            },
            {
               name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2019/Sep/7",
            },
            {
               name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "https://seclists.org/bugtraq/2019/Sep/7",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
            },
            {
               name: "20210901 SEC Consult SA-20210901-0 :: Multiple vulnerabilities in MOXA devices",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2021/Sep/0",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.arista.com/en/support/advisories-notices/security-advisories/1255-security-advisory-17",
            },
            {
               name: "20220617 SEC Consult SA-20220615-0 :: Hardcoded Backdoor User and Outdated Software Components in Nexans FTTO GigaSwitch series",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2022/Jun/36",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2015-7547",
      datePublished: "2016-02-18T21:00:00",
      dateReserved: "2015-09-29T00:00:00",
      dateUpdated: "2024-08-06T07:51:28.440Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2013-4458

Vulnerability from cvelistv5

Published

2013-12-12 18:00

Modified

2024-08-06 16:45

Severity ?

Summary

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.18 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of AF_INET6 address results. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1914.

References

▼	URL	Tags
	https://sourceware.org/ml/libc-alpha/2013-10/msg00733.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html	vendor-advisory, x_refsource_SUSE
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:284	vendor-advisory, x_refsource_MANDRIVA
	https://security.gentoo.org/glsa/201503-04	vendor-advisory, x_refsource_GENTOO
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:283	vendor-advisory, x_refsource_MANDRIVA
	https://sourceware.org/bugzilla/show_bug.cgi?id=16072	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T16:45:14.820Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[libc-alpha] 20131022 [PATCH][BZ #16072] Fix stack overflow due to large AF_INET6 requests",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://sourceware.org/ml/libc-alpha/2013-10/msg00733.html",
               },
               {
                  name: "SUSE-SU-2016:0470",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
               },
               {
                  name: "MDVSA-2013:284",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_MANDRIVA",
                     "x_transferred",
                  ],
                  url: "http://www.mandriva.com/security/advisories?name=MDVSA-2013:284",
               },
               {
                  name: "GLSA-201503-04",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201503-04",
               },
               {
                  name: "MDVSA-2013:283",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_MANDRIVA",
                     "x_transferred",
                  ],
                  url: "http://www.mandriva.com/security/advisories?name=MDVSA-2013:283",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://sourceware.org/bugzilla/show_bug.cgi?id=16072",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2013-10-22T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.18 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of AF_INET6 address results.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1914.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-06-30T16:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "[libc-alpha] 20131022 [PATCH][BZ #16072] Fix stack overflow due to large AF_INET6 requests",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://sourceware.org/ml/libc-alpha/2013-10/msg00733.html",
            },
            {
               name: "SUSE-SU-2016:0470",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
            },
            {
               name: "MDVSA-2013:284",
               tags: [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
               ],
               url: "http://www.mandriva.com/security/advisories?name=MDVSA-2013:284",
            },
            {
               name: "GLSA-201503-04",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201503-04",
            },
            {
               name: "MDVSA-2013:283",
               tags: [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
               ],
               url: "http://www.mandriva.com/security/advisories?name=MDVSA-2013:283",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://sourceware.org/bugzilla/show_bug.cgi?id=16072",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2013-4458",
      datePublished: "2013-12-12T18:00:00",
      dateReserved: "2013-06-12T00:00:00",
      dateUpdated: "2024-08-06T16:45:14.820Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2013-2207

Vulnerability from cvelistv5

Published

2013-10-09 22:00

Modified

2024-08-06 15:27

Severity ?

Summary

pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.

References

▼	URL	Tags
	https://sourceware.org/bugzilla/show_bug.cgi?id=15755	x_refsource_CONFIRM
	http://secunia.com/advisories/55113	third-party-advisory, x_refsource_SECUNIA
	http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html	vendor-advisory, x_refsource_SUSE
	https://sourceware.org/ml/libc-alpha/2013-08/msg00160.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2985-2	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=976408	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201503-04	vendor-advisory, x_refsource_GENTOO
	http://www.mandriva.com/security/advisories?name=MDVSA-2013:283	vendor-advisory, x_refsource_MANDRIVA
	http://www.ubuntu.com/usn/USN-2985-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T15:27:41.090Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://sourceware.org/bugzilla/show_bug.cgi?id=15755",
               },
               {
                  name: "55113",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_SECUNIA",
                     "x_transferred",
                  ],
                  url: "http://secunia.com/advisories/55113",
               },
               {
                  name: "SUSE-SU-2015:1424",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html",
               },
               {
                  name: "[libc-alpha] 20130812 The GNU C Library version 2.18 is now available",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://sourceware.org/ml/libc-alpha/2013-08/msg00160.html",
               },
               {
                  name: "SUSE-SU-2016:0470",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
               },
               {
                  name: "USN-2985-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2985-2",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=976408",
               },
               {
                  name: "GLSA-201503-04",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201503-04",
               },
               {
                  name: "MDVSA-2013:283",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_MANDRIVA",
                     "x_transferred",
                  ],
                  url: "http://www.mandriva.com/security/advisories?name=MDVSA-2013:283",
               },
               {
                  name: "USN-2985-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2985-1",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2013-07-19T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2017-06-30T16:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://sourceware.org/bugzilla/show_bug.cgi?id=15755",
            },
            {
               name: "55113",
               tags: [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
               ],
               url: "http://secunia.com/advisories/55113",
            },
            {
               name: "SUSE-SU-2015:1424",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00019.html",
            },
            {
               name: "[libc-alpha] 20130812 The GNU C Library version 2.18 is now available",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://sourceware.org/ml/libc-alpha/2013-08/msg00160.html",
            },
            {
               name: "SUSE-SU-2016:0470",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
            },
            {
               name: "USN-2985-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2985-2",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=976408",
            },
            {
               name: "GLSA-201503-04",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201503-04",
            },
            {
               name: "MDVSA-2013:283",
               tags: [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
               ],
               url: "http://www.mandriva.com/security/advisories?name=MDVSA-2013:283",
            },
            {
               name: "USN-2985-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2985-1",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2013-2207",
      datePublished: "2013-10-09T22:00:00",
      dateReserved: "2013-02-19T00:00:00",
      dateUpdated: "2024-08-06T15:27:41.090Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8776

Vulnerability from cvelistv5

Published

2016-04-19 21:00

Modified

2024-08-06 08:29

Severity ?

Summary

The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive information via an out-of-range time value.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html	vendor-advisory, x_refsource_SUSE
	http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html	vendor-advisory, x_refsource_FEDORA
	https://access.redhat.com/errata/RHSA-2017:1916	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2016/dsa-3481	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2017-0680.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2985-2	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2016/01/20/1	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201702-11	vendor-advisory, x_refsource_GENTOO
	https://security.gentoo.org/glsa/201602-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html	vendor-advisory, x_refsource_SUSE
	https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/01/19/11	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/83277	vdb-entry, x_refsource_BID
	https://sourceware.org/bugzilla/show_bug.cgi?id=18985	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3480	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2985-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:29:21.646Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "SUSE-SU-2016:0471",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html",
               },
               {
                  name: "FEDORA-2016-68abc0be35",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html",
               },
               {
                  name: "RHSA-2017:1916",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:1916",
               },
               {
                  name: "DSA-3481",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3481",
               },
               {
                  name: "openSUSE-SU-2016:0510",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html",
               },
               {
                  name: "SUSE-SU-2016:0470",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
               },
               {
                  name: "RHSA-2017:0680",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2017-0680.html",
               },
               {
                  name: "USN-2985-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2985-2",
               },
               {
                  name: "[oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/01/20/1",
               },
               {
                  name: "GLSA-201702-11",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201702-11",
               },
               {
                  name: "GLSA-201602-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201602-02",
               },
               {
                  name: "SUSE-SU-2016:0472",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html",
               },
               {
                  name: "SUSE-SU-2016:0473",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html",
               },
               {
                  name: "[libc-alpha] 20160219 The GNU C Library version 2.23 is now available",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html",
               },
               {
                  name: "[oss-security] 20160119 CVE assignment request for security bugs fixed in glibc 2.23",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/01/19/11",
               },
               {
                  name: "83277",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/83277",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://sourceware.org/bugzilla/show_bug.cgi?id=18985",
               },
               {
                  name: "DSA-3480",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3480",
               },
               {
                  name: "USN-2985-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2985-1",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-01-19T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive information via an out-of-range time value.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-04T19:57:01",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "SUSE-SU-2016:0471",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html",
            },
            {
               name: "FEDORA-2016-68abc0be35",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html",
            },
            {
               name: "RHSA-2017:1916",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:1916",
            },
            {
               name: "DSA-3481",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3481",
            },
            {
               name: "openSUSE-SU-2016:0510",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html",
            },
            {
               name: "SUSE-SU-2016:0470",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
            },
            {
               name: "RHSA-2017:0680",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2017-0680.html",
            },
            {
               name: "USN-2985-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2985-2",
            },
            {
               name: "[oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/01/20/1",
            },
            {
               name: "GLSA-201702-11",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201702-11",
            },
            {
               name: "GLSA-201602-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201602-02",
            },
            {
               name: "SUSE-SU-2016:0472",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html",
            },
            {
               name: "SUSE-SU-2016:0473",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html",
            },
            {
               name: "[libc-alpha] 20160219 The GNU C Library version 2.23 is now available",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html",
            },
            {
               name: "[oss-security] 20160119 CVE assignment request for security bugs fixed in glibc 2.23",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/01/19/11",
            },
            {
               name: "83277",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/83277",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://sourceware.org/bugzilla/show_bug.cgi?id=18985",
            },
            {
               name: "DSA-3480",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3480",
            },
            {
               name: "USN-2985-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2985-1",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2015-8776",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive information via an out-of-range time value.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "SUSE-SU-2016:0471",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html",
                  },
                  {
                     name: "FEDORA-2016-68abc0be35",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html",
                  },
                  {
                     name: "RHSA-2017:1916",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2017:1916",
                  },
                  {
                     name: "DSA-3481",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3481",
                  },
                  {
                     name: "openSUSE-SU-2016:0510",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html",
                  },
                  {
                     name: "SUSE-SU-2016:0470",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
                  },
                  {
                     name: "RHSA-2017:0680",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2017-0680.html",
                  },
                  {
                     name: "USN-2985-2",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2985-2",
                  },
                  {
                     name: "[oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/01/20/1",
                  },
                  {
                     name: "GLSA-201702-11",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201702-11",
                  },
                  {
                     name: "GLSA-201602-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201602-02",
                  },
                  {
                     name: "SUSE-SU-2016:0472",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html",
                  },
                  {
                     name: "SUSE-SU-2016:0473",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html",
                  },
                  {
                     name: "[libc-alpha] 20160219 The GNU C Library version 2.23 is now available",
                     refsource: "MLIST",
                     url: "https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html",
                  },
                  {
                     name: "[oss-security] 20160119 CVE assignment request for security bugs fixed in glibc 2.23",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/01/19/11",
                  },
                  {
                     name: "83277",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/83277",
                  },
                  {
                     name: "https://sourceware.org/bugzilla/show_bug.cgi?id=18985",
                     refsource: "CONFIRM",
                     url: "https://sourceware.org/bugzilla/show_bug.cgi?id=18985",
                  },
                  {
                     name: "DSA-3480",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3480",
                  },
                  {
                     name: "USN-2985-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2985-1",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2015-8776",
      datePublished: "2016-04-19T21:00:00",
      dateReserved: "2016-01-19T00:00:00",
      dateUpdated: "2024-08-06T08:29:21.646Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-8779

Vulnerability from cvelistv5

Published

2016-04-19 21:00

Modified

2024-08-06 08:29

Severity ?

Summary

Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name.

References

▼	URL	Tags
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html	vendor-advisory, x_refsource_SUSE
	http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html	vendor-advisory, x_refsource_FEDORA
	https://access.redhat.com/errata/RHSA-2017:1916	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2016/dsa-3481	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2017-0680.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2985-2	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2016/01/20/1	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201702-11	vendor-advisory, x_refsource_GENTOO
	https://security.gentoo.org/glsa/201602-02	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html	vendor-advisory, x_refsource_SUSE
	https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/01/19/11	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/82244	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2016/dsa-3480	vendor-advisory, x_refsource_DEBIAN
	https://sourceware.org/bugzilla/show_bug.cgi?id=17905	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2985-1	vendor-advisory, x_refsource_UBUNTU
	http://seclists.org/fulldisclosure/2019/Sep/7	mailing-list, x_refsource_FULLDISC
	https://seclists.org/bugtraq/2019/Sep/7	mailing-list, x_refsource_BUGTRAQ
	http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T08:29:22.111Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "SUSE-SU-2016:0471",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html",
               },
               {
                  name: "FEDORA-2016-68abc0be35",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html",
               },
               {
                  name: "RHSA-2017:1916",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:1916",
               },
               {
                  name: "DSA-3481",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3481",
               },
               {
                  name: "openSUSE-SU-2016:0510",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html",
               },
               {
                  name: "SUSE-SU-2016:0470",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
               },
               {
                  name: "RHSA-2017:0680",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2017-0680.html",
               },
               {
                  name: "USN-2985-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2985-2",
               },
               {
                  name: "[oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/01/20/1",
               },
               {
                  name: "GLSA-201702-11",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201702-11",
               },
               {
                  name: "GLSA-201602-02",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201602-02",
               },
               {
                  name: "SUSE-SU-2016:0472",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html",
               },
               {
                  name: "SUSE-SU-2016:0473",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html",
               },
               {
                  name: "[libc-alpha] 20160219 The GNU C Library version 2.23 is now available",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html",
               },
               {
                  name: "[oss-security] 20160119 CVE assignment request for security bugs fixed in glibc 2.23",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/01/19/11",
               },
               {
                  name: "82244",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/82244",
               },
               {
                  name: "DSA-3480",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3480",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://sourceware.org/bugzilla/show_bug.cgi?id=17905",
               },
               {
                  name: "USN-2985-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2985-1",
               },
               {
                  name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2019/Sep/7",
               },
               {
                  name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "https://seclists.org/bugtraq/2019/Sep/7",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-01-19T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2019-09-05T01:06:06",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "SUSE-SU-2016:0471",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html",
            },
            {
               name: "FEDORA-2016-68abc0be35",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html",
            },
            {
               name: "RHSA-2017:1916",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:1916",
            },
            {
               name: "DSA-3481",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3481",
            },
            {
               name: "openSUSE-SU-2016:0510",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html",
            },
            {
               name: "SUSE-SU-2016:0470",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
            },
            {
               name: "RHSA-2017:0680",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2017-0680.html",
            },
            {
               name: "USN-2985-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2985-2",
            },
            {
               name: "[oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/01/20/1",
            },
            {
               name: "GLSA-201702-11",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201702-11",
            },
            {
               name: "GLSA-201602-02",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201602-02",
            },
            {
               name: "SUSE-SU-2016:0472",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html",
            },
            {
               name: "SUSE-SU-2016:0473",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html",
            },
            {
               name: "[libc-alpha] 20160219 The GNU C Library version 2.23 is now available",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html",
            },
            {
               name: "[oss-security] 20160119 CVE assignment request for security bugs fixed in glibc 2.23",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/01/19/11",
            },
            {
               name: "82244",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/82244",
            },
            {
               name: "DSA-3480",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3480",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://sourceware.org/bugzilla/show_bug.cgi?id=17905",
            },
            {
               name: "USN-2985-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2985-1",
            },
            {
               name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2019/Sep/7",
            },
            {
               name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "https://seclists.org/bugtraq/2019/Sep/7",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2015-8779",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "SUSE-SU-2016:0471",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html",
                  },
                  {
                     name: "FEDORA-2016-68abc0be35",
                     refsource: "FEDORA",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184626.html",
                  },
                  {
                     name: "RHSA-2017:1916",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2017:1916",
                  },
                  {
                     name: "DSA-3481",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3481",
                  },
                  {
                     name: "openSUSE-SU-2016:0510",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html",
                  },
                  {
                     name: "SUSE-SU-2016:0470",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html",
                  },
                  {
                     name: "RHSA-2017:0680",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2017-0680.html",
                  },
                  {
                     name: "USN-2985-2",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2985-2",
                  },
                  {
                     name: "[oss-security] 20160119 Re: CVE assignment request for security bugs fixed in glibc 2.23",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/01/20/1",
                  },
                  {
                     name: "GLSA-201702-11",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201702-11",
                  },
                  {
                     name: "GLSA-201602-02",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201602-02",
                  },
                  {
                     name: "SUSE-SU-2016:0472",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html",
                  },
                  {
                     name: "SUSE-SU-2016:0473",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html",
                  },
                  {
                     name: "[libc-alpha] 20160219 The GNU C Library version 2.23 is now available",
                     refsource: "MLIST",
                     url: "https://www.sourceware.org/ml/libc-alpha/2016-02/msg00502.html",
                  },
                  {
                     name: "[oss-security] 20160119 CVE assignment request for security bugs fixed in glibc 2.23",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/01/19/11",
                  },
                  {
                     name: "82244",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/82244",
                  },
                  {
                     name: "DSA-3480",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3480",
                  },
                  {
                     name: "https://sourceware.org/bugzilla/show_bug.cgi?id=17905",
                     refsource: "CONFIRM",
                     url: "https://sourceware.org/bugzilla/show_bug.cgi?id=17905",
                  },
                  {
                     name: "USN-2985-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2985-1",
                  },
                  {
                     name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2019/Sep/7",
                  },
                  {
                     name: "20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X",
                     refsource: "BUGTRAQ",
                     url: "https://seclists.org/bugtraq/2019/Sep/7",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2015-8779",
      datePublished: "2016-04-19T21:00:00",
      dateReserved: "2016-01-19T00:00:00",
      dateUpdated: "2024-08-06T08:29:22.111Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature