CVE-2015-0235
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors rela...
Affects 24 products across 8 vendors.
Software writes data past buffer boundaries, corrupting memory and potentially enabling code execution.
A heap-based buffer overflow vulnerability exists in the __nss_hostname_digits_dots function in glibc versions 2.2 and other 2.x versions before 2.18, known as 'GHOST'. This vulnerability allows attackers to execute arbitrary code through specific function calls, posing a significant security risk.
BSID: BS-2015-GLOBAL-190042-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2015-0235?
What is the CVSS score for CVE-2015-0235?
Is CVE-2015-0235 actively exploited?
How do I remediate CVE-2015-0235?
What systems are affected by CVE-2015-0235?
| CVE ID | CVE-2015-0235 |
|---|---|
| BSID | BS-2015-GLOBAL-190042-C BreachSpider Global ID |
| CVSS Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| Published | 2015-01-28 |
| Last Modified | 2026-06-17 |
| ICS Relevance | 70% |
| Weakness (CWE) | |
| Source | NVD |
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."
Source: NIST NVD / MITRE CVE Database
The vulnerability can be exploited via the gethostbyname or gethostbyname2 functions. An attacker can craft malicious input that triggers a buffer overflow, leading to arbitrary code execution in the context of the application using these functions.
Exploitation Likelihood: CRITICAL
| Vendor | Product | Affected Versions |
|---|---|---|
| Apple | Mac Os X | < 10.11.1 |
| Debian | Debian Linux | 7.0 8.0 |
| Gnu | Glibc | ≥ 2.0, < 2.18 |
| Ibm | Security Access Manager For Enterprise Single Sign-On | 8.2 |
| Ibm | Pureapplication System | 1.0.0.0 1.1.0.0 2.0.0.0 |
| Oracle | Communications Policy Management | 9.7.3 9.9.1 10.4.1 11.5 12.1.1 |
| Oracle | Communications Eagle Application Processor | 16.0 |
| Oracle | Communications Eagle Lnp Application Processor | 10.0 |
| Oracle | Linux | 5 7 |
| Oracle | Vm Virtualbox | < 5.1.24 |
| Oracle | Communications Application Session Controller | < 3.7.1 |
| Oracle | Communications User Data Repository | ≥ 10.0.0, ≤ 10.0.1 |
| Oracle | Communications Lsms | 13.1 |
| Oracle | Communications Session Border Controller | 7.2.0 8.0.0 < 7.2.0 |
| Oracle | Communications Webrtc Session Controller | 7.0 7.1 7.2 |
| Oracle | Exalogic Infrastructure | 1.0 2.0 |
| Php | Php | ≥ 5.4.0, < 5.4.38 ≥ 5.5.0, < 5.5.22 ≥ 5.6.0, < 5.6.6 |
| Redhat | Virtualization | 6.0 |
| Siemens | Sinumerik 828D (device & firmware) | ≤ 4.7 |
| Siemens | Sinumerik 840D Sl (device & firmware) | ≤ 4.7 |
| Siemens | Sinumerik 808D (device & firmware) | ≤ 4.7 |
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | ⚠ Available — Reference |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
Critical Severity - Know Your Exposure
A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →