{"id":"CVE-2015-0235","url":"https://www.cyber-defence.io/tools/cve/CVE-2015-0235","generatedAt":"2026-11-05T06:39:02.241Z","title":"Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2…","description":"Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka \"GHOST.\"","published":"2015-01-28T19:59:00.000Z","lastModified":"2026-06-17T00:19:47.000Z","status":"Modified","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"2.0","score":10,"severity":"HIGH","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C"},"cwe":["CWE-787"],"affected":["gnu/glibc","oracle/communications application session controller","oracle/communications eagle application processor","oracle/communications eagle lnp application processor","oracle/communications lsms","oracle/communications policy management","oracle/communications session border controller","oracle/communications user data repository","oracle/communications webrtc session controller","oracle/exalogic infrastructure","oracle/vm virtualbox","oracle/linux","debian/debian linux","redhat/virtualization","apple/mac os x","ibm/pureapplication system","ibm/security access manager for enterprise single sign-on","php/php"],"epss":{"score":0.94558,"percentile":0.99855,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":2,"verified":true,"firstPublished":"2015-01-29","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":36421,"kind":"exploit","title":"Exim - 'GHOST' glibc gethostbyname Buffer Overflow (Metasploit)","url":"https://www.exploit-db.com/exploits/36421","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/36421.rb","file":"exploits/linux/remote/36421.rb","published":"2015-03-18","added":"2015-03-18","updated":"2018-01-22","author":"Qualys Corporation","type":"remote","platform":"linux","port":25,"verified":true,"codes":["CVE-2015-0235","OSVDB-117579"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.qualys.com/research/security-advisories/GHOST-CVE-2015-0235.txt"},{"edbId":35951,"kind":"exploit","title":"Exim ESMTP 4.80 - glibc gethostbyname Denial of Service","url":"https://www.exploit-db.com/exploits/35951","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/35951.py","file":"exploits/linux/dos/35951.py","published":"2015-01-29","added":"2015-02-03","updated":"2016-10-27","author":"1n3","type":"dos","platform":"linux","port":null,"verified":false,"codes":["CVE-2015-0235","OSVDB-117579"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 94.6%, higher than 100% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://blogs.sophos.com/2015/01/29/sophos-products-and-the-ghost-vulnerability-affecting-linux/","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://linux.oracle.com/errata/ELSA-2015-0090.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://linux.oracle.com/errata/ELSA-2015-0092.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142296726407499&w=2","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142721102728110&w=2","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142722450701342&w=2","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=142781412222323&w=2","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://marc.info/?l=bugtraq&m=143145428124857&w=2","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/130171/Exim-ESMTP-GHOST-Denial-Of-Service.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/130768/EMC-Secure-Remote-Services-GHOST-SQL-Injection-Command-Injection.html","tags":["Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/130974/Exim-GHOST-glibc-gethostbyname-Buffer-Overflow.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0126.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://seclists.org/fulldisclosure/2015/Jan/111","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://seclists.org/fulldisclosure/2019/Jun/18","tags":["Exploit","Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://seclists.org/fulldisclosure/2021/Sep/0","tags":["Exploit","Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://seclists.org/fulldisclosure/2022/Jun/36","tags":["Exploit","Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://seclists.org/oss-sec/2015/q1/269","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://seclists.org/oss-sec/2015/q1/274","tags":["Exploit","Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62517","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62640","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62667","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62680","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62681","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62688","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62690","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62691","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62692","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62698","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62715","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62758","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62812","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62813","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62816","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62865","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62870","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62871","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62879","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/62883","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT204942","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150128-ghost","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21695695","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21695774","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21695835","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21695860","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21696131","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21696243","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21696526","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21696600","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21696602","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21696618","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3142","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.idirect.net/Partners/~/media/Files/CVE/iDirect-Posted-Common-Vulnerabilities-and-Exposures.pdf","tags":["Broken Link","URL Repurposed"],"source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:039","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2021/05/04/7","tags":["Exploit","Mailing List"],"source":"secalert@redhat.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-0235","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}