CVE-2015-5229
First published: Mon Aug 24 2015(Updated: )
It was discovered that the calloc implementation in glibc, as shipped in the Red Hat Enterprise Linux 6.7 GA and 7.2 GA version, could return memory areas which contain non-zero bytes. This could lead to application misbehavior such as hangs or crashes.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Enterprise Linux | =6.7 | |
| Red Hat Enterprise Linux | =7.2 | |
| Red Hat Enterprise Linux Desktop | =7.0 | |
| Red Hat Enterprise Linux HPC Node | =7.0 | |
| Red Hat Enterprise Linux HPC Node | =7.2 | |
| Red Hat Enterprise Linux Server | =7.0 | |
| Red Hat Enterprise Linux Server | =7.2 | |
| Red Hat Enterprise Linux Server | =7.2 | |
| Red Hat Enterprise Linux Workstation | =7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://rhn.redhat.com/errata/RHBA-2015-1465.html
- https://rhn.redhat.com/errata/RHSA-2016-0176.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1256285
- http://rhn.redhat.com/errata/RHSA-2016-0176.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
- http://www.securityfocus.com/bid/84172
- https://bugzilla.redhat.com/show_bug.cgi?id=1246713
- https://bugzilla.redhat.com/show_bug.cgi?id=1293976
- https://kc.mcafee.com/corporate/index?page=content&id=SB10150
Frequently Asked Questions
What are the potential impacts of CVE-2015-5229?
CVE-2015-5229 can lead to application misbehavior, including hangs or crashes due to incorrect memory initialization.
What versions of Red Hat Enterprise Linux are affected by CVE-2015-5229?
CVE-2015-5229 affects Red Hat Enterprise Linux versions 6.7, 7.0, and 7.2.
How can CVE-2015-5229 be mitigated or fixed?
To mitigate CVE-2015-5229, users should apply the relevant security patches provided by Red Hat for their affected systems.
Was CVE-2015-5229 disclosed responsibly?
Yes, CVE-2015-5229 was reported and documented in collaboration with Red Hat, ensuring responsible disclosure.
What is the significance of the calloc implementation vulnerability in CVE-2015-5229?
The significance lies in the fact that improper memory initialization can create unpredictable behavior in applications which rely on calloc.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2015-5229
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/redhat
- canonical/red hat enterprise linux
- version/red hat enterprise linux/6.7
- version/red hat enterprise linux/7.2
- canonical/red hat enterprise linux desktop
- version/red hat enterprise linux desktop/7.0
- canonical/red hat enterprise linux hpc node
- version/red hat enterprise linux hpc node/7.0
- version/red hat enterprise linux hpc node/7.2
- canonical/red hat enterprise linux server
- version/red hat enterprise linux server/7.0
- version/red hat enterprise linux server/7.2
- canonical/red hat enterprise linux workstation
- version/red hat enterprise linux workstation/7.0