ID de Prueba:	1.3.6.1.4.1.25623.1.0.105554
Categoría:	F5 Local Security Checks
Título:	F5 BIG-IP - glibc vulnerability CVE-2015-7547
Resumen:	The remote host is missing a security patch.
Descripción:	Summary: The remote host is missing a security patch. Vulnerability Insight: The glibc DNS client side resolver is vulnerable to a stack-based buffer overflow when the getaddrinfo() library function is used. Software using this function may be exploited with attacker-controlled domain names, attacker-controlled DNS servers, or through a man-in-the-middle attack. Vulnerability Impact: Currently unknown Solution: See the referenced vendor advisory for a solution. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-7547 BugTraq ID: 83265 http://www.securityfocus.com/bid/83265 Bugtraq: 20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X (Google Search) https://seclists.org/bugtraq/2019/Sep/7 CERT/CC vulnerability note: VU#457759 https://www.kb.cert.org/vuls/id/457759 Debian Security Information: DSA-3480 (Google Search) http://www.debian.org/security/2016/dsa-3480 Debian Security Information: DSA-3481 (Google Search) http://www.debian.org/security/2016/dsa-3481 https://www.exploit-db.com/exploits/39454/ https://www.exploit-db.com/exploits/40339/ http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177404.html http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177412.html http://seclists.org/fulldisclosure/2019/Sep/7 http://seclists.org/fulldisclosure/2021/Sep/0 https://security.gentoo.org/glsa/201602-02 HPdes Security Advisory: HPSBGN03442 http://marc.info/?l=bugtraq&m=145690841819314&w=2 HPdes Security Advisory: HPSBGN03547 http://marc.info/?l=bugtraq&m=145596041017029&w=2 HPdes Security Advisory: HPSBGN03549 http://marc.info/?l=bugtraq&m=145672440608228&w=2 HPdes Security Advisory: HPSBGN03551 http://marc.info/?l=bugtraq&m=145857691004892&w=2 HPdes Security Advisory: HPSBGN03582 http://marc.info/?l=bugtraq&m=146161017210491&w=2 http://packetstormsecurity.com/files/135802/glibc-getaddrinfo-Stack-Based-Buffer-Overflow.html http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.html https://googleonlinesecurity.blogspot.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html https://ics-cert.us-cert.gov/advisories/ICSA-16-103-01 https://www.tenable.com/security/research/tra-2017-08 https://sourceware.org/ml/libc-alpha/2016-02/msg00416.html RedHat Security Advisories: RHSA-2016:0175 http://rhn.redhat.com/errata/RHSA-2016-0175.html RedHat Security Advisories: RHSA-2016:0176 http://rhn.redhat.com/errata/RHSA-2016-0176.html RedHat Security Advisories: RHSA-2016:0225 http://rhn.redhat.com/errata/RHSA-2016-0225.html RedHat Security Advisories: RHSA-2016:0277 http://rhn.redhat.com/errata/RHSA-2016-0277.html http://www.securitytracker.com/id/1035020 SuSE Security Announcement: SUSE-SU-2016:0470 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html SuSE Security Announcement: SUSE-SU-2016:0471 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00037.html SuSE Security Announcement: SUSE-SU-2016:0472 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00038.html SuSE Security Announcement: SUSE-SU-2016:0473 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00039.html SuSE Security Announcement: openSUSE-SU-2016:0510 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00042.html SuSE Security Announcement: openSUSE-SU-2016:0511 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00043.html SuSE Security Announcement: openSUSE-SU-2016:0512 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00044.html http://ubuntu.com/usn/usn-2900-1
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.