CVE-2015-0235: Buffer Overflow
Heap-based buffer overflow in the nsshostnamedigitsdots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0235?
CVE-2015-0235 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2015-0235?
To fix CVE-2015-0235, upgrade glibc to version 2.18 or later, or apply the relevant patches for affected software.
What systems are affected by CVE-2015-0235?
CVE-2015-0235 affects various versions of the GNU C Library (glibc) and specific Oracle applications running versions prior to the patched releases.
What type of attacks can exploit CVE-2015-0235?
CVE-2015-0235 can be exploited by attackers using functions like gethostbyname or gethostbyname2 to execute arbitrary code.
Is CVE-2015-0235 still a threat?
CVE-2015-0235 remains a potential threat for systems that have not been updated or patched since the vulnerability was disclosed.