Bug 1284642 (CVE-2015-7510) - CVE-2015-7510 systemd: Stack overflow in nss-mymachines
Summary: CVE-2015-7510 systemd: Stack overflow in nss-mymachines
Keywords:
Status: CLOSED NOTABUG
Alias: CVE-2015-7510
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1284825
Blocks: 1284643
TreeView+ depends on / blocked
 
Reported: 2015-11-23 17:59 UTC by Adam Mariš
Modified: 2021-06-01 15:11 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-01-13 09:37:40 UTC
Embargoed:

Attachments (Terms of Use)

Description Adam Mariš 2015-11-23 17:59:48 UTC 
A stack-based buffer overflow vulnerability was found in getpwnam()/getgrnam() functions of NSS module nss-mymachines provided by systemd.
Comment 3 Adam Mariš 2015-11-24 09:57:10 UTC 
Public via:

https://github.com/systemd/systemd/issues/2002
Comment 4 Adam Mariš 2015-11-24 09:59:34 UTC 
Created systemd tracking bugs for this issue:

Affects: fedora-all [bug 1284825]
Comment 5 Adam Mariš 2015-11-24 10:01:14 UTC 
Upstream patch:

https://github.com/keszybz/systemd/commit/cb31827d62066a04b02111df3052949fda4b6888
Comment 6 Cedric Buissart 2016-01-13 09:37:40 UTC 
The bug was introduced with the _nss_mymachines_getpwnam_r() & _nss_mymachines_getgrnam_r() functions, in v223.
RHEL7 is currently shipping older versions, and thus is not vulnerable.

Statement:

This issue did not affect the versions of systemd as shipped with Red Hat Enterprise Linux 7.
Note You need to log in before you can comment on or make changes to this bug.