GNU glibc Buffer Overflow vulnerability

Last Update Date: 18 Feb 2016 13:34 Release Date: 18 Feb 2016 3902 Views

RISK: Medium Risk

TYPE: Operating Systems - Others OS

A vulnerability has been identified in GNU glibc, which contains a buffer overflow vulnerability in the DNS resolver. Exploitation of this vulnerability may allow a remote attacker to take control of an affected system.

Impact

Remote Code Execution

System / Technologies affected

Versions prior to 2.23

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix:
https://sourceware.org/ml/libc-alpha/2016-02/msg00416.html

Vulnerability Identifier

CVE-2015-7547

Source

US-CERT