Exploitation Summary
CVE-2015-7547 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 14 public exploits from researchers including Google Security Research, SpeeDr00t, fjserna.
AI-analyzed exploit summary CVE-2015-7547 is a stack-based buffer overflow in glibc's DNS resolver. The exploit triggers a mismatch between stack and heap buffers during DNS response handling, leading to a crash or potential RCE.
Description
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.
Exploits (14)
CVE-2015-7547 is a stack-based buffer overflow in glibc's DNS resolver. The exploit triggers a mismatch between stack and heap buffers during DNS response handling, leading to a crash or potential RCE.
This exploit targets CVE-2015-7547, a stack-based buffer overflow in glibc's getaddrinfo function. It uses a malicious DNS server to trigger the vulnerability and execute shellcode for remote code execution.
This repository contains a functional proof-of-concept exploit for CVE-2015-7547, a vulnerability in the glibc getaddrinfo() function. The exploit includes both client and server components to trigger a stack-based buffer overflow via crafted DNS responses, leading to a denial-of-service (DoS) condition.
This repository contains a functional PoC for CVE-2015-7547, a stack-based buffer overflow in glibc's getaddrinfo() function. The exploit consists of a client and server component that manipulate DNS responses to trigger the vulnerability, leading to potential remote code execution.
This repository contains a functional PoC attack server for CVE-2015-7547, a buffer overflow vulnerability in glibc's DNS stub resolver. The exploit demonstrates multiple attack sequences to trigger stack-based buffer overflows via crafted DNS responses, leading to crashes (e.g., stack smashing detected).
This repository contains a functional proof-of-concept exploit for CVE-2015-7547, a buffer overflow vulnerability in the glibc DNS resolver. The exploit demonstrates multiple attack sequences to trigger stack-based buffer overflows via crafted DNS responses, leading to crashes (e.g., stack smashing detected).
This repository contains a shell script to detect the presence of CVE-2015-7547, a glibc vulnerability affecting the getaddrinfo function. It checks installed glibc versions and RPM changelogs for patches, but does not include exploit code.
This repository contains a functional PoC for CVE-2015-7547, a vulnerability in glibc's DNS resolver that can cause a stack-based buffer overflow leading to a crash (DoS). The PoC demonstrates the crash via a malicious DNS server and client interactions, with evidence of segmentation faults in logs.
This repository contains a functional exploit for CVE-2015-7547, a stack-based buffer overflow in glibc's getaddrinfo() function. The exploit uses a crafted DNS response to trigger the vulnerability and achieve remote code execution by returning to libc and calling system() to spawn a shell.
The repository contains only a minimal README with no exploit code or technical details. It is a placeholder with no functional content.
This repository contains a functional proof-of-concept exploit for CVE-2015-7547, a stack-based buffer overflow in the glibc getaddrinfo() function. The exploit includes both client and server components to trigger the vulnerability via crafted DNS responses.
This repository contains a functional proof-of-concept exploit for CVE-2015-7547, a vulnerability in the glibc getaddrinfo() function. The exploit involves a malicious DNS server that triggers a stack-based buffer overflow via crafted DNS responses, leading to remote code execution or denial of service.
This repository contains a functional proof-of-concept exploit for CVE-2015-7547, a stack-based buffer overflow in glibc's getaddrinfo function. The exploit includes both client and server components to trigger the vulnerability via crafted DNS responses.
The repository contains minimal content related to CVE-2015-7547, with only a README and meta.yml file describing a setup and check task for glibc updates, but no actual exploit code or technical details.
References (75)
Scores
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H