CVE-2015-7547

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

92.38% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 99.8% of scored records. A rank, not a probability.

NVD base score

8.1 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Critical. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2016-02-18 21:00Z10 YR AGO

Last updated

2024-08-06 07:51Z2 YR AGO

Reserved

2015-09-29

Assigning CNA

redhat

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferClass
• CWE-121Stack-based Buffer OverflowVariant

Data version

5.1

Document digest

34905a655ac8b8803a0c18f72ac99963739086670e1f3b5929e7826a42e4738c

• www.securitytracker.com1035020http://www.securitytracker.com/id/1035020vdb-entryx_refsource_SECTRACK
• marc.infoHPSBGN03582http://marc.info/?l=bugtraq&m=146161017210491&w=2vendor-advisoryx_refsource_HP
• lists.opensuse.orgSUSE-SU-2016:0471http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.htmlvendor-advisoryx_refsource_SUSE
• rhn.redhat.comRHSA-2016:0175http://rhn.redhat.com/errata/RHSA-2016-0175.htmlvendor-advisoryx_refsource_REDHAT
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05140858x_refsource_CONFIRM
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05125672x_refsource_CONFIRM
• blogs.sophos.comhttps://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/x_refsource_CONFIRM
• sourceware.orghttps://sourceware.org/bugzilla/show_bug.cgi?id=18665x_refsource_CONFIRM
• marc.infoHPSBGN03551http://marc.info/?l=bugtraq&m=145857691004892&w=2vendor-advisoryx_refsource_HP
• rhn.redhat.comRHSA-2016:0225http://rhn.redhat.com/errata/RHSA-2016-0225.htmlvendor-advisoryx_refsource_REDHAT
• lists.fedoraproject.orgFEDORA-2016-0f9e9a34cehttp://lists.fedoraproject.org/pipermail/package-announce/2016-February/177412.htmlvendor-advisoryx_refsource_FEDORA
• kb.pulsesecure.nethttps://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40161x_refsource_CONFIRM
• www.debian.orgDSA-3481http://www.debian.org/security/2016/dsa-3481vendor-advisoryx_refsource_DEBIAN
• www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlx_refsource_CONFIRM
• lists.opensuse.orgopenSUSE-SU-2016:0510http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.htmlvendor-advisoryx_refsource_SUSE
• ubuntu.comUSN-2900-1http://ubuntu.com/usn/usn-2900-1vendor-advisoryx_refsource_UBUNTU
• www.fortiguard.comhttp://www.fortiguard.com/advisory/glibc-getaddrinfo-stack-overflowx_refsource_CONFIRM
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917x_refsource_CONFIRM
• rhn.redhat.comRHSA-2016:0277http://rhn.redhat.com/errata/RHSA-2016-0277.htmlvendor-advisoryx_refsource_REDHAT
• lists.opensuse.orgopenSUSE-SU-2016:0511http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00043.htmlvendor-advisoryx_refsource_SUSE
• googleonlinesecurity.blogspot.comhttps://googleonlinesecurity.blogspot.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.htmlx_refsource_MISC
• www.oracle.comhttp://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.htmlx_refsource_CONFIRM
• security.netapp.comhttps://security.netapp.com/advisory/ntap-20160217-0002/x_refsource_CONFIRM
• lists.opensuse.orgSUSE-SU-2016:0470http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.htmlvendor-advisoryx_refsource_SUSE
• blogs.sophos.comhttps://blogs.sophos.com/2016/02/24/utm-up2date-9-355-released/x_refsource_CONFIRM
• support.lenovo.comhttps://support.lenovo.com/us/en/product_security/len_5450x_refsource_CONFIRM
• www.tenable.comhttps://www.tenable.com/security/research/tra-2017-08x_refsource_MISC
• www.vmware.comhttp://www.vmware.com/security/advisories/VMSA-2016-0002.htmlx_refsource_CONFIRM
• marc.infoHPSBGN03549http://marc.info/?l=bugtraq&m=145672440608228&w=2vendor-advisoryx_refsource_HP
• www.securityfocus.com83265http://www.securityfocus.com/bid/83265vdb-entryx_refsource_BID
• fortiguard.comhttp://fortiguard.com/advisory/glibc-getaddrinfo-stack-overflowx_refsource_CONFIRM
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380x_refsource_CONFIRM
• security.gentoo.orgGLSA-201602-02https://security.gentoo.org/glsa/201602-02vendor-advisoryx_refsource_GENTOO
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128937x_refsource_CONFIRM
• marc.infoHPSBGN03547http://marc.info/?l=bugtraq&m=145596041017029&w=2vendor-advisoryx_refsource_HP
• lists.opensuse.orgSUSE-SU-2016:0472http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.htmlvendor-advisoryx_refsource_SUSE
• www.exploit-db.com40339https://www.exploit-db.com/exploits/40339/exploitx_refsource_EXPLOIT-DB
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05098877x_refsource_CONFIRM
• bto.bluecoat.comhttps://bto.bluecoat.com/security-advisory/sa114x_refsource_CONFIRM
• sourceware.org[libc-alpha] 20160216 [PATCH] CVE-2015-7547 --- glibc getaddrinfo() stack-based buffer overflowhttps://sourceware.org/ml/libc-alpha/2016-02/msg00416.htmlmailing-listx_refsource_MLIST
• lists.opensuse.orgSUSE-SU-2016:0473http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.htmlvendor-advisoryx_refsource_SUSE
• help.ecostruxureit.comhttps://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixesx_refsource_CONFIRM
• packetstormsecurity.comhttp://packetstormsecurity.com/files/135802/glibc-getaddrinfo-Stack-Based-Buffer-Overflow.htmlx_refsource_MISC
• bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=1293532x_refsource_CONFIRM
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05008367x_refsource_CONFIRM
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722x_refsource_CONFIRM
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176716x_refsource_CONFIRM
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05053211x_refsource_CONFIRM
• www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlx_refsource_CONFIRM
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05028479x_refsource_CONFIRM
• support.f5.comhttps://support.f5.com/kb/en-us/solutions/public/k/47/sol47098834.htmlx_refsource_CONFIRM
• rhn.redhat.comRHSA-2016:0176http://rhn.redhat.com/errata/RHSA-2016-0176.htmlvendor-advisoryx_refsource_REDHAT
• lists.fedoraproject.orgFEDORA-2016-0480defc94http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.htmlvendor-advisoryx_refsource_FEDORA
• lists.opensuse.orgopenSUSE-SU-2016:0512http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00044.htmlvendor-advisoryx_refsource_SUSE
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04989404x_refsource_CONFIRM
• www.debian.orgDSA-3480http://www.debian.org/security/2016/dsa-3480vendor-advisoryx_refsource_DEBIAN
• ics-cert.us-cert.govhttps://ics-cert.us-cert.gov/advisories/ICSA-16-103-01x_refsource_MISC
• www.exploit-db.com39454https://www.exploit-db.com/exploits/39454/exploitx_refsource_EXPLOIT-DB
• support.citrix.comhttp://support.citrix.com/article/CTX206991x_refsource_CONFIRM
• www.huawei.comhttp://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160304-01-glibc-enx_refsource_CONFIRM
• www.kb.cert.orgVU#457759https://www.kb.cert.org/vuls/id/457759third-party-advisoryx_refsource_CERT-VN
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05130958x_refsource_CONFIRM
• access.redhat.comhttps://access.redhat.com/articles/2161461x_refsource_CONFIRM
• kc.mcafee.comhttps://kc.mcafee.com/corporate/index?page=content&id=SB10150x_refsource_CONFIRM
• marc.infoHPSBGN03442http://marc.info/?l=bugtraq&m=145690841819314&w=2vendor-advisoryx_refsource_HP
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05212266x_refsource_CONFIRM
• h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073516x_refsource_CONFIRM
• seclists.org20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16Xhttp://seclists.org/fulldisclosure/2019/Sep/7mailing-listx_refsource_FULLDISC
• seclists.org20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16Xhttps://seclists.org/bugtraq/2019/Sep/7mailing-listx_refsource_BUGTRAQ
• packetstormsecurity.comhttp://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.htmlx_refsource_MISC
• seclists.org20210901 SEC Consult SA-20210901-0 :: Multiple vulnerabilities in MOXA deviceshttp://seclists.org/fulldisclosure/2021/Sep/0mailing-listx_refsource_FULLDISC
• packetstormsecurity.comhttp://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.htmlx_refsource_MISC
• www.arista.comhttps://www.arista.com/en/support/advisories-notices/security-advisories/1255-security-advisory-17x_refsource_MISC
• seclists.org20220617 SEC Consult SA-20220615-0 :: Hardcoded Backdoor User and Outdated Software Components in Nexans FTTO GigaSwitch serieshttp://seclists.org/fulldisclosure/2022/Jun/36mailing-listx_refsource_FULLDISC
• packetstormsecurity.comhttp://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.htmlx_refsource_MISC