CVE-2015-7547 Memory corruption in n/a

High 8.1 Published 18 Feb 2016 Updated 6 Aug 2024

Remote attackers can execute arbitrary code or cause denial of service via crafted DNS responses exploiting stack buffer overflows in glibc.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2015-7547?

CVE-2015-7547 is a high-severity memory corruption vulnerability in Canonical Ubuntu Linux, published on 18 Feb 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.

Weakness: CWE-119

Which versions are affected by CVE-2015-7547?

It affects 30 products.

Linux distribution packages (40)

`glibc` Red Hat:enterprise_linux:6::client	All versions	`0:2.12-1.166.el6_7.7`
`glibc-common` Red Hat:enterprise_linux:6::client	All versions	`0:2.12-1.166.el6_7.7`
`glibc-debuginfo` Red Hat:enterprise_linux:6::client	All versions	`0:2.12-1.166.el6_7.7`
`glibc-debuginfo-common` Red Hat:enterprise_linux:6::client	All versions	`0:2.12-1.166.el6_7.7`
`glibc-devel` Red Hat:enterprise_linux:6::client	All versions	`0:2.12-1.166.el6_7.7`
`glibc-headers` Red Hat:enterprise_linux:6::client	All versions	`0:2.12-1.166.el6_7.7`
`glibc-static` Red Hat:enterprise_linux:6::client	All versions	`0:2.12-1.166.el6_7.7`
`glibc-utils` Red Hat:enterprise_linux:6::client	All versions	`0:2.12-1.166.el6_7.7`
`nscd` Red Hat:enterprise_linux:6::client	All versions	`0:2.12-1.166.el6_7.7`
`glibc` Red Hat:enterprise_linux:6::computenode	All versions	`0:2.12-1.166.el6_7.7`
`glibc-common` Red Hat:enterprise_linux:6::computenode	All versions	`0:2.12-1.166.el6_7.7`
`glibc-debuginfo` Red Hat:enterprise_linux:6::computenode	All versions	`0:2.12-1.166.el6_7.7`
`glibc-debuginfo-common` Red Hat:enterprise_linux:6::computenode	All versions	`0:2.12-1.166.el6_7.7`
`glibc-devel` Red Hat:enterprise_linux:6::computenode	All versions	`0:2.12-1.166.el6_7.7`
`glibc-headers` Red Hat:enterprise_linux:6::computenode	All versions	`0:2.12-1.166.el6_7.7`
`glibc-static` Red Hat:enterprise_linux:6::computenode	All versions	`0:2.12-1.166.el6_7.7`
`glibc-utils` Red Hat:enterprise_linux:6::computenode	All versions	`0:2.12-1.166.el6_7.7`
`nscd` Red Hat:enterprise_linux:6::computenode	All versions	`0:2.12-1.166.el6_7.7`
`rhev-hypervisor6` Red Hat:enterprise_linux:6::hypervisor	All versions	`0:6.7-20160104.2.el6ev`
`rhev-hypervisor7` Red Hat:enterprise_linux:6::hypervisor	All versions	`0:7.2-20160105.2.el6ev`
`glibc` Red Hat:enterprise_linux:6::server	All versions	`0:2.12-1.166.el6_7.7`
`glibc-common` Red Hat:enterprise_linux:6::server	All versions	`0:2.12-1.166.el6_7.7`
`glibc-debuginfo` Red Hat:enterprise_linux:6::server	All versions	`0:2.12-1.166.el6_7.7`
`glibc-debuginfo-common` Red Hat:enterprise_linux:6::server	All versions	`0:2.12-1.166.el6_7.7`
`glibc-devel` Red Hat:enterprise_linux:6::server	All versions	`0:2.12-1.166.el6_7.7`
`glibc-headers` Red Hat:enterprise_linux:6::server	All versions	`0:2.12-1.166.el6_7.7`
`glibc-static` Red Hat:enterprise_linux:6::server	All versions	`0:2.12-1.166.el6_7.7`
`glibc-utils` Red Hat:enterprise_linux:6::server	All versions	`0:2.12-1.166.el6_7.7`
`nscd` Red Hat:enterprise_linux:6::server	All versions	`0:2.12-1.166.el6_7.7`
`glibc` Red Hat:enterprise_linux:6::workstation	All versions	`0:2.12-1.166.el6_7.7`
`glibc-common` Red Hat:enterprise_linux:6::workstation	All versions	`0:2.12-1.166.el6_7.7`
`glibc-debuginfo` Red Hat:enterprise_linux:6::workstation	All versions	`0:2.12-1.166.el6_7.7`
`glibc-debuginfo-common` Red Hat:enterprise_linux:6::workstation	All versions	`0:2.12-1.166.el6_7.7`
`glibc-devel` Red Hat:enterprise_linux:6::workstation	All versions	`0:2.12-1.166.el6_7.7`
`glibc-headers` Red Hat:enterprise_linux:6::workstation	All versions	`0:2.12-1.166.el6_7.7`
`glibc-static` Red Hat:enterprise_linux:6::workstation	All versions	`0:2.12-1.166.el6_7.7`
`glibc-utils` Red Hat:enterprise_linux:6::workstation	All versions	`0:2.12-1.166.el6_7.7`
`nscd` Red Hat:enterprise_linux:6::workstation	All versions	`0:2.12-1.166.el6_7.7`
`rhev-hypervisor7` Red Hat:enterprise_linux:7::hypervisor	All versions	`0:7.2-20160105.2.el7ev`
`glibc` Red Hat:rhel_aus:6.4::server	All versions	`0:2.12-1.107.el6_4.9`

Products include Canonical Ubuntu Linux, Debian Debian Linux, F5 Big-Ip Access Policy Manager, F5 Big-Ip Advanced Firewall Manager, F5 Big-Ip Analytics, F5 Big-Ip Application Acceleration Manager and 24 more.

How do I fix CVE-2015-7547?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2015-7547 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2015-7547 exists.

Public exploit code: 2 Exploit-DB entries and 11 proofs of concept on GitHub.

All Canonical Ubuntu Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2015-7547, DLA-416-1, GHSA-5xr7-h7cp-w9pc, RHSA-2016:0175, RHSA-2016:0225, RHSA-2016:0277 and 3 more.