CVE-2015-0235 Memory corruption in n/a

What is CVE-2015-0235?

CVE-2015-0235 is a critical memory corruption vulnerability in Apple Mac Os X, published on 28 Jan 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

Weakness: CWE-787

Which versions are affected by CVE-2015-0235?

It affects 18 products.

Products include Apple Mac Os X, Debian Debian Linux, Gnu Glibc, Ibm Pureapplication System, Ibm Security Access Manager for Enterprise Single Sign-On, Oracle Communications Application Session Controller and 12 more.

How do I fix CVE-2015-0235?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2015-0235 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2015-0235 exists.

Public exploit code: 2 Metasploit modules, 2 Exploit-DB entries and 16 proofs of concept on GitHub.

Other vulnerabilities in Apple Mac Os X

• CVE-2014-7169 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Exploited Critical 9.8
• CVE-2014-6271 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Exploited Critical 9.8
• CVE-2012-1823 PHP-CGI Query String Parameter Exploited Critical 9.8
• CVE-2021-30713 Apple macOS Unspecified Exploited High 7.8
• CVE-2019-8526 Apple macOS Use-After-Free Exploited High 7.8

All Apple Mac Os X vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2015-0235, DLA-139-1, GHSA-jwcp-p679-fcr4, RHSA-2015:0090, RHSA-2015:0092, RHSA-2015:0099 and 1 more.