kbrain

CVE-2015-7547

HIGH · CVSS 8.1EPSS 91.0%EU EUVD

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.

Key facts

CVSS score
8.1 (v3.0)
Severity
HIGH
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE)
CWE-119
EPSS score
91.0% (100th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2015-7461)
Published
February 18, 2016
NVD last modified
June 17, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2015-7461 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

  • canonical / ubuntu linux
  • canonical / ubuntu linux
  • canonical / ubuntu linux
  • debian / debian linux
  • f5 / big-ip access policy manager
  • f5 / big-ip advanced firewall manager
  • f5 / big-ip analytics
  • f5 / big-ip application acceleration manager
  • f5 / big-ip application security manager
  • f5 / big-ip domain name system
  • f5 / big-ip link controller
  • f5 / big-ip local traffic manager
  • f5 / big-ip policy enforcement manager
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • gnu / glibc
  • hp / helion openstack
  • hp / helion openstack
  • hp / helion openstack
  • hp / server migration pack
  • opensuse / opensuse
  • oracle / exalogic infrastructure
  • oracle / exalogic infrastructure
  • oracle / fujitsu m10 firmware
  • redhat / enterprise linux desktop
  • redhat / enterprise linux hpc node
  • redhat / enterprise linux hpc node eus
  • redhat / enterprise linux server
  • redhat / enterprise linux server aus
  • redhat / enterprise linux server eus
  • redhat / enterprise linux workstation
  • sophos / unified threat management software

and 18 more…

Certified products that may be affected

4 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain