CVE-2015-7547

high

Published 2016-02-18 · Modified 2026-05-06

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

8.1

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v4 NEW

—

not yet in upstream

VIR risk

9.1

Description

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.

Predictions

Exploit likelihood

88%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Exploits

Public proof-of-concept code below. AS-IS, for defenders and authorised testing only.

Exploit-DB

EDB-39454 dos linux verified

Google Security Research · 2016-02-16

glibc - 'getaddrinfo' Stack Buffer Overflow (PoC)

Source code queued for fetch — refresh in a moment.

EDB-40339 remote linux

SpeeDr00t · 2016-09-06

glibc - 'getaddrinfo' Remote Stack Buffer Overflow

Source code queued for fetch — refresh in a moment.

OS impact

Red Hat Affected 1 release

Version	Status	Fixed in
7.0	Affected	—

SUSE Affected 3 releases

Version	Status	Fixed in
13.2	Affected	—
12	Affected	—
11.0	Affected	—

Ubuntu Affected 3 releases

Version	Status	Fixed in
15.10	Affected	—
14.04	Affected	—
12.04	Affected	—

Debian Mixed 6 releases

Version	Status	Fixed in
trixie	Fixed	`2.21-8`
sid	Fixed	`2.21-8`
forky	Fixed	`2.21-8`
bullseye	Fixed	`2.21-8`
bookworm	Fixed	`2.21-8`
8.0	Affected	—

Application impact

Vendor	Product	Versions
hp	helion_openstack	`1.1.1`
hp	helion_openstack	`2.0.0`
hp	helion_openstack	`2.1.0`
hp	server_migration_pack	`7.5`
sophos	unified_threat_management_software	`9.319`
sophos	unified_threat_management_software	`9.355`
suse	linux_enterprise_debuginfo	`11.0`
oracle	exalogic_infrastructure	`1.0`
oracle	exalogic_infrastructure	`2.0`
f5	big-ip_access_policy_manager	`12.0.0`
f5	big-ip_advanced_firewall_manager	`12.0.0`
f5	big-ip_analytics	`12.0.0`
f5	big-ip_application_acceleration_manager	`12.0.0`
f5	big-ip_application_security_manager	`12.0.0`
f5	big-ip_domain_name_system	`12.0.0`
f5	big-ip_link_controller	`12.0.0`
f5	big-ip_local_traffic_manager	`12.0.0`
f5	big-ip_policy_enforcement_manager	`12.0.0`
gnu	glibc	`2.9`
gnu	glibc	`2.10`
gnu	glibc	`2.10.1`
gnu	glibc	`2.11`
gnu	glibc	`2.11.1`
gnu	glibc	`2.11.2`
gnu	glibc	`2.11.3`
gnu	glibc	`2.12`
gnu	glibc	`2.12.1`
gnu	glibc	`2.12.2`
gnu	glibc	`2.13`
gnu	glibc	`2.14`
gnu	glibc	`2.14.1`
gnu	glibc	`2.15`
gnu	glibc	`2.16`
gnu	glibc	`2.17`
gnu	glibc	`2.18`
gnu	glibc	`2.19`
gnu	glibc	`2.20`
gnu	glibc	`2.21`
gnu	glibc	`2.22`

References

CWEs

CWE-119

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.