{"cve_id":"CVE-2015-0235","published":"2015-01-28T19:59:00.063000+00:00","last_modified":"2026-06-17T00:19:47.230000+00:00","vuln_status":"Modified","description":"Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka \"GHOST.\"","cvss_version":"2.0","cvss_vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","base_score":10.0,"base_severity":"HIGH","attack_vector":"NETWORK","privileges_req":"","user_interaction":"NONE","scope":"","impact_c":"COMPLETE","impact_i":"COMPLETE","impact_a":"COMPLETE","cwe_ids":["CWE-787"],"in_kev":false,"kev_date_added":null,"kev_ransomware":false,"epss_score":0.94558,"epss_percentile":0.99855,"cap_rule_version":"0.1.1","stage":"INITIAL_ACCESS","req_access":"NONE","req_vector":"NETWORK","req_user_interaction":false,"grant_access":"USER","caps":["CODE_EXEC"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-09-18T08:21:42.610771+00:00","first_seen":"2015-01-28T19:59:00.063000+00:00","kev_first_seen":null,"novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["apple","debian","gnu","ibm","oracle","php","redhat"],"products":["communications_application_session_controller","communications_eagle_application_processor","communications_eagle_lnp_application_processor","communications_lsms","communications_policy_management","communications_session_border_controller","communications_user_data_repository","communications_webrtc_session_controller","debian_linux","exalogic_infrastructure","glibc","linux","mac_os_x","php","pureapplication_system","security_access_manager_for_enterprise_single_sign-on","virtualization","vm_virtualbox"],"affected":[{"vendor":"apple","product":"mac_os_x","ranges":["< 10.11.1"]},{"vendor":"debian","product":"debian_linux","ranges":["7.0","8.0"]},{"vendor":"gnu","product":"glibc","ranges":["≥ 2.0 and < 2.18"]},{"vendor":"ibm","product":"pureapplication_system","ranges":["1.0.0.0","2.0.0.0","1.1.0.0"]},{"vendor":"ibm","product":"security_access_manager_for_enterprise_single_sign-on","ranges":["8.2"]},{"vendor":"oracle","product":"communications_application_session_controller","ranges":["< 3.7.1"]},{"vendor":"oracle","product":"communications_eagle_application_processor","ranges":["16.0"]},{"vendor":"oracle","product":"communications_eagle_lnp_application_processor","ranges":["10.0"]},{"vendor":"oracle","product":"communications_lsms","ranges":["13.1"]},{"vendor":"oracle","product":"communications_policy_management","ranges":["9.9.1","11.5","12.1.1","9.7.3","10.4.1"]},{"vendor":"oracle","product":"communications_session_border_controller","ranges":["7.2.0","< 7.2.0","8.0.0"]},{"vendor":"oracle","product":"communications_user_data_repository","ranges":["≥ 10.0.0 and ≤ 10.0.1"]},{"vendor":"oracle","product":"communications_webrtc_session_controller","ranges":["7.2","7.0","7.1"]},{"vendor":"oracle","product":"exalogic_infrastructure","ranges":["1.0","2.0"]},{"vendor":"oracle","product":"linux","ranges":["7","5"]},{"vendor":"oracle","product":"vm_virtualbox","ranges":["< 5.1.24"]},{"vendor":"php","product":"php","ranges":["≥ 5.6.0 and < 5.6.6","≥ 5.4.0 and < 5.4.38","≥ 5.5.0 and < 5.5.22"]},{"vendor":"redhat","product":"virtualization","ranges":["6.0"]}]}