Bug 1199525 – CVE-2015-1781 glibc: buffer overflow in gethostbyname_r() and related functions with misaligned buffer

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1199525 - (CVE-2015-1781) CVE-2015-1781 glibc: buffer overflow in gethostbyname_r() and related functions with misaligned buffer

Summary:	CVE-2015-1781 glibc: buffer overflow in gethostbyname_r() and related functio...

Status:	CLOSED ERRATA

Aliases:	CVE-2015-1781

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	medium Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Red Hat Product Security
QA Contact:
Docs Contact:

URL:
Whiteboard:	impact=moderate,public=20150421,repor...
Keywords:	Security

Depends On:	1209107 1209375 1209376 1214152 1214154
Blocks:	1199526 1210268 1262918
	Show dependency tree / graph

Reported:	2015-03-06 09:55 EST by Vasyl Kaigorodov
Modified:	2016-02-17 07:49 EST (History)
CC List:	7 users (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:	A buffer overflow flaw was found in the way glibc's gethostbyname_r() and other related functions computed the size of a buffer when passed a misaligned buffer as input. An attacker able to make an application call any of these functions with a misaligned buffer could use this flaw to crash the application or, potentially, execute arbitrary code with the permissions of the user running the application.
Story Points:	---
Clone Of:
Environment:
Last Closed:	2015-11-20 00:52:59 EST
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
resolver.patch (957 bytes, patch) 2015-03-09 06:58 EDT, Florian Weimer	no flags	Details \| Diff
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Sourceware	18287	None	None	None	Never
Red Hat Product Errata	RHSA-2015:0863	normal	SHIPPED_LIVE	Moderate: glibc security and bug fix update	2015-04-21 11:34:41 EDT
Red Hat Product Errata	RHSA-2015:2199	normal	SHIPPED_LIVE	Moderate: glibc security, bug fix, and enhancement update	2015-11-19 03:04:22 EST
Red Hat Product Errata	RHSA-2015:2589	normal	SHIPPED_LIVE	Important: glibc security update	2015-12-09 08:57:25 EST

Groups: None (edit)

Description Vasyl Kaigorodov 2015-03-06 09:55:29 EST

Arjun Shankar of Red Hat discovered that gethostbyname_r and related functions compute the size of an input buffer incorrectly if the passed-in buffer is misaligned. This results in a buffer overflow.

Comment 3 Florian Weimer 2015-03-09 06:58:11 EDT

Created attachment 999499 [details]
resolver.patch

Arjun's patch.

Comment 15 Martin Prpič 2015-04-20 04:03:35 EDT

Acknowledgements:

This issue was discovered by Arjun Shankar of Red Hat.

Comment 18 errata-xmlrpc 2015-04-21 07:35:10 EDT

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 6

Via RHSA-2015:0863 https://rhn.redhat.com/errata/RHSA-2015-0863.html

Comment 20 Florian Weimer 2015-04-22 02:15:03 EDT

Created glibc tracking bugs for this issue:

Affects: fedora-all [bug 1214152]

Comment 21 Huzaifa S. Sidhpurwala 2015-07-17 01:45:23 EDT

Statement:

Red Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Comment 22 errata-xmlrpc 2015-11-18 23:17:00 EST

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2015:2199 https://rhn.redhat.com/errata/RHSA-2015-2199.html

Comment 23 errata-xmlrpc 2015-12-09 03:58:20 EST

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7.1 EUS - Server and Compute Node Only
  Red Hat Enterprise Linux 7.1 EUS  - Server and Compute Node Only

Via RHSA-2015:2589 https://rhn.redhat.com/errata/RHSA-2015-2589.html

Comment 24 Fedora Update System 2016-02-17 07:49:36 EST

glibc-2.21-11.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report.

Note You need to log in before you can comment on or make changes to this bug.