CVE-2015-5229: High severity red hat enterprise linux vulnerability
It was discovered that the calloc implementation in glibc, as shipped in the Red Hat Enterprise Linux 6.7 GA and 7.2 GA version, could return memory areas which contain non-zero bytes. This could lead to application misbehavior such as hangs or crashes.
Other sources
The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of service (hang or crash) via unspecified vectors.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What are the potential impacts of CVE-2015-5229?
CVE-2015-5229 can lead to application misbehavior, including hangs or crashes due to incorrect memory initialization.
What versions of Red Hat Enterprise Linux are affected by CVE-2015-5229?
CVE-2015-5229 affects Red Hat Enterprise Linux versions 6.7, 7.0, and 7.2.
How can CVE-2015-5229 be mitigated or fixed?
To mitigate CVE-2015-5229, users should apply the relevant security patches provided by Red Hat for their affected systems.
Was CVE-2015-5229 disclosed responsibly?
Yes, CVE-2015-5229 was reported and documented in collaboration with Red Hat, ensuring responsible disclosure.
What is the significance of the calloc implementation vulnerability in CVE-2015-5229?
The significance lies in the fact that improper memory initialization can create unpredictable behavior in applications which rely on calloc.