目标达成感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%

请我们喝杯咖啡

CVE-2015-0235— GNU glibc 基于堆的缓冲区错误漏洞

一分钟漏洞结论

影响对象

n/a n/a

利用判断

存在公开或 AI PoC，应优先验证

建议动作

优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

GNU glibc（又名GNU C Library，libc6）是一种按照LGPL许可协议发布的开源免费的C语言编译程序。 GNU glibc 2.2版本和2.18之前2.x版本中的‘__nss_hostname_digits_dots’函数存在基于堆的缓冲区溢出漏洞。本地和远程攻击者都可通过调用‘ gethostbyname*()’函数利用该漏洞以运行应用程序的用户权限执行任意代码，控制系统。

AI 预测 9.8 利用难度: 较易 EPSS 94.56% · P100 更新于 2026-02-21

公开利用映射 4

ExploitDB · 2 EDB-35951 [dos] EDB-36421 [remote]

Metasploit · 2 exim_gethostbyname_bof.rb [exploit] wordpress_ghost_scanner.rb [auxiliary]

可能的 ATT&CK 技术 2 AI

T1195 · Supply Chain Compromise T1204 · User Execution

获取后续新漏洞提醒登录后订阅

一、漏洞 CVE-2015-0235 基础信息

漏洞信息

对漏洞内容有疑问？看看神龙的深度分析是否有帮助！

查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title

N/A

来源: CVE Program / CVE List V5

Vulnerability Description

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

来源: CVE Program / CVE List V5

CVSS Information

N/A

来源: CVE Program / CVE List V5

Vulnerability Type

N/A

来源: CVE Program / CVE List V5

Vulnerability Title

GNU glibc 基于堆的缓冲区错误漏洞

来源: 中国国家信息安全漏洞库 CNNVD

Vulnerability Description

来源: 中国国家信息安全漏洞库 CNNVD

CVSS Information

N/A

来源: 中国国家信息安全漏洞库 CNNVD

Vulnerability Type

N/A

来源: 中国国家信息安全漏洞库 CNNVD

神龙十问 — AI 深度分析

十问解析：根本原因、利用方式、修复建议、紧迫性。摘要免费，完整版需登录。

查看摘要完整分析（登录）

受影响产品

厂商	产品	影响版本	CPE	订阅
-	n/a	n/a	-

二、漏洞 CVE-2015-0235 的公开POC

#	POC 描述	源链接	神龙链接
1	Test wether you're exposed to ghost (CVE-2015-0235). All kudos go to Qualys Security	https://github.com/fser/ghost-checker	POC详情
2	A chef cookbook to test the GHOST vulnerability	https://github.com/mikesplain/CVE-2015-0235-cookbook	POC详情
3	Ansible playbook to check vulnerability for CVE-2015-0235	https://github.com/aaronfay/CVE-2015-0235-test	POC详情
4	glibc vulnerability GHOST(CVE-2015-0235) Affected software list	https://github.com/piyokango/ghost	POC详情
5	None	https://github.com/mholzinger/CVE-2015-0235_GHOST	POC详情
6	Ansible playbook, to check for CVE-2015-0235 (GHOST) vulnerability	https://github.com/adherzog/ansible-CVE-2015-0235-GHOST	POC详情
7	CVE-2015-0235 patches lenny libc6 packages for amd64	https://github.com/favoretti/lenny-libc6	POC详情
8	gethostbyname*() buffer overflow exploit in glibc - CVE-2015-0235 https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability	https://github.com/nickanderson/cfengine-CVE_2015_0235	POC详情
9	cookbook for update glibc. CVE-2015-0235(GHOST)	https://github.com/koudaiii-archives/cookbook-update-glibc	POC详情
10	Playbooks 'Fix for CVE-2015-0235(GHOST)' running on Ansible	https://github.com/F88/ghostbusters15	POC详情
11	glibc gethostbyname bug	https://github.com/tobyzxj/CVE-2015-0235	POC详情
12	A shared library wrapper with additional checks for vulnerable functions gethostbyname2_r gethostbyname_r (GHOST vulnerability)	https://github.com/makelinux/CVE-2015-0235-workaround	POC详情
13	CVE-2015-0235 EXIM ESTMP GHOST Glibc Gethostbyname() DoS Exploit/PoC	https://github.com/arm13/ghost_exploit	POC详情
14	CVE-2015-0235	https://github.com/alanmeyer/CVE-glibc	POC详情
15	Script to test vulnarability for CVE-2015-0235	https://github.com/1and1-serversupport/ghosttester	POC详情
16	None	https://github.com/sUbc0ol/CVE-2015-0235	POC详情
17	A check for GHOST; cve-2015-0235	https://github.com/chayim/GHOSTCHECK-cve-2015-0235	POC详情
18	None	https://github.com/limkokholefork/GHOSTCHECK-cve-2015-0235	POC详情
19	None	https://github.com/furyutei/CVE-2015-0235_GHOST	POC详情

AI 生成 POC 高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2015-0235 的情报信息

请登录查看更多情报信息。

CVE-2015-0235 厂商安全公告 (54)

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html x_refsource_CONFIRM
🔗 2015-01 Out of Cycle Security Bulletin: GHOST glibc gethostbyname() buffer overflow vulnerability (CVE-2015-0235) 查看完整文章 x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html x_refsource_CONFIRM
🔗 HPSBGN03426 rev.4 - HP Mobility Software, Remote Execution of Arbitrary Code 查看完整文章 x_refsource_CONFIRM
https://support.apple.com/HT205375 x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg21696618 x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html x_refsource_CONFIRM
http://support.apple.com/kb/HT204942 x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg21696600 x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg21696602 x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/ssa-994726.pdf x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg21695695 x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg21695835 x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg21696131 x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg21696243 x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg21696526 x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html x_refsource_CONFIRM
https://support.apple.com/HT205267 x_refsource_CONFIRM
https://security.netapp.com/advisory/ntap-20150127-0001/ x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg21695774 x_refsource_CONFIRM
http://secunia.com/advisories/62812 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62870 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62813 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62883 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62517 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62680 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62879 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62681 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62865 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62692 third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/bid/72325 vdb-entry x_refsource_BID
http://secunia.com/advisories/62691 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62698 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62688 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62640 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62871 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62690 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62667 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62816 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62715 third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/62758 third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/bid/91787 vdb-entry x_refsource_BID
http://www.securitytracker.com/id/1032909 vdb-entry x_refsource_SECTRACK
http://www.debian.org/security/2015/dsa-3142 vendor-advisory x_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2015-0126.html vendor-advisory x_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=MDVSA-2015:039 vendor-advisory x_refsource_MANDRIVA
https://security.gentoo.org/glsa/201503-04 vendor-advisory x_refsource_GENTOO
http://www.securityfocus.com/archive/1/534845/100/0/threaded mailing-list x_refsource_BUGTRAQ
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150128-ghost vendor-advisory x_refsource_CISCO

CVE-2015-0235 公开利用代码 (6)

CVE-2015-0235 邮件列表归档 (15)

http://marc.info/?l=bugtraq&m=142296726407499&w=2 vendor-advisory x_refsource_HP
http://marc.info/?l=bugtraq&m=142781412222323&w=2 vendor-advisory x_refsource_HP
http://marc.info/?l=bugtraq&m=143145428124857&w=2 vendor-advisory x_refsource_HP
http://marc.info/?l=bugtraq&m=142721102728110&w=2 vendor-advisory x_refsource_HP
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html vendor-advisory x_refsource_APPLE
http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html vendor-advisory x_refsource_APPLE
http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html vendor-advisory x_refsource_APPLE
http://www.openwall.com/lists/oss-security/2021/05/04/7 mailing-list x_refsource_MLIST
http://seclists.org/oss-sec/2015/q1/269 mailing-list x_refsource_BUGTRAQ
http://seclists.org/fulldisclosure/2021/Sep/0 mailing-list x_refsource_FULLDISC
http://seclists.org/oss-sec/2015/q1/274 mailing-list x_refsource_BUGTRAQ
http://seclists.org/fulldisclosure/2015/Jan/111 mailing-list x_refsource_FULLDISC
https://seclists.org/bugtraq/2019/Jun/14 mailing-list x_refsource_BUGTRAQ
http://seclists.org/fulldisclosure/2019/Jun/18 mailing-list x_refsource_FULLDISC
http://seclists.org/fulldisclosure/2022/Jun/36 mailing-list x_refsource_FULLDISC

CVE-2015-0235 其他参考 (13)

https://www.arista.com/en/support/advisories-notices/security-advisories/1053-security-advisory-9 x_refsource_MISC
https://www.sophos.com/en-us/support/knowledgebase/121879.aspx x_refsource_CONFIRM
http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0 x_refsource_CONFIRM
https://kc.mcafee.com/corporate/index?page=content&id=SB10100 x_refsource_CONFIRM
https://bto.bluecoat.com/security-advisory/sa90 x_refsource_CONFIRM
https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes x_refsource_CONFIRM
http://linux.oracle.com/errata/ELSA-2015-0092.html x_refsource_CONFIRM
https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability x_refsource_MISC
http://www.idirect.net/Partners/~/media/Files/CVE/iDirect-Posted-Common-Vulnerabilities-and-Exposures.pdf x_refsource_CONFIRM
http://linux.oracle.com/errata/ELSA-2015-0090.html x_refsource_CONFIRM
https://www.f-secure.com/en/web/labs_global/fsc-2015-1 x_refsource_CONFIRM
https://www.qualys.com/research/security-advisories/GHOST-CVE-2015-0235.txt x_refsource_MISC
http://blogs.sophos.com/2015/01/29/sophos-products-and-the-ghost-vulnerability-affecting-linux/ x_refsource_CONFIRM

https://www.cve.org/CVERecord?id=CVE-2015-0235

同批安全公告 · n/a · 2015-01-28 · 共 9 条

CVE-2014-8917		IBM Social Media Analytics 跨站脚本漏洞
CVE-2014-8920		IBM i Access 5770-XE1 Data Transfer Program 缓冲区溢出漏洞
CVE-2015-0312		Adobe Flash Player 双重释放漏洞
CVE-2015-0581		Cisco Prime Service Catalog 安全漏洞
CVE-2015-0586		Cisco 2900 Series Integrated Services Router 拒绝服务漏洞
CVE-2015-1375		WordPress Pixabay Images插件权限许可和访问控制漏洞
CVE-2015-1376		WordPress Pixabay Images插件输入验证漏洞
CVE-2015-1419		VSFTP 安全漏洞

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2015-0235

暂无评论

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

CVE-2015-0235— GNU glibc 基于堆的缓冲区错误漏洞

一分钟漏洞结论

公开利用映射 4

可能的 ATT&CK 技术 2 AI

一、 漏洞 CVE-2015-0235 基础信息

漏洞信息

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

神龙十问 — AI 深度分析

受影响产品

二、漏洞 CVE-2015-0235 的公开POC

三、漏洞 CVE-2015-0235 的情报信息

CVE-2015-0235 厂商安全公告 (54)

CVE-2015-0235 公开利用代码 (6)

CVE-2015-0235 邮件列表归档 (15)

CVE-2015-0235 其他参考 (13)

同批安全公告 · n/a · 2015-01-28 · 共 9 条

IV. Related Vulnerabilities

V. Comments for CVE-2015-0235

发表评论

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

一、漏洞 CVE-2015-0235 基础信息