Glibc.Getaddrinfo.Stack.Buffer.Overflow

Description

This indicates an attack attempt against a Buffer Overflow vulnerability in GNU C Library (glibc).
The vulnerability is caused by an error in getaddrinfo() glibc function call. It allows a remote attacker to execute arbitrary code on vulnerable systems.

Affected Products

GNU C Library (glibc) versions from 2.9 to 2.22

Impact

System Compromise: Remote attacker can gain control of vulnerable systems.

Recommended Actions

Currently we are unaware of any vendor supplied patch for this issue.

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-103-01 https://sourceware.org/ml/libc-alpha/2016-02/msg00416.html http://www.kb.cert.org/vuls/id/457759 https://googleonlinesecurity.blogspot.ca/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html