Bug 1249603 (CVE-2015-5180)

Summary:	CVE-2015-5180 glibc: DNS resolver NULL pointer dereference with crafted record type
Product:	[Other] Security Response	Reporter:	Florian Weimer <fweimer>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	ashankar, carnil, codonell, fweimer, glibc-bugzilla, jrusnack, mnewsome, pfrankli, sardella, security-response-team, spoyarek
Target Milestone:	---	Keywords:	Reopened, Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2019-06-08 02:43:00 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1251403, 1497131
Bug Blocks:	1249606, 1498774

Description Florian Weimer 2015-08-03 11:52:12 UTC

It was discovered that the glibc DNS resolver dereferenced a NULL pointer
when processing a specific, but valid resource record type.

Acknowledgements:

Name: Florian Weimer (Red Hat Product Security)

Comment 1 Florian Weimer 2015-08-07 08:59:17 UTC

Created glibc tracking bugs for this issue:

Affects: fedora-all [bug 1251403]

Comment 3 Adam Mariš 2017-02-09 09:02:42 UTC

Upstream bug:

https://sourceware.org/bugzilla/show_bug.cgi?id=18784

Upstream patch:

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=fc82b0a2dfe7dbd35671c10510a8da1043d746a5

Comment 5 errata-xmlrpc 2018-04-10 08:20:51 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2018:0805 https://access.redhat.com/errata/RHSA-2018:0805