Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2015-0235

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."

CVSS 10.0 · CriticalBuzz score 30.0

Buzz score

Why this CVE is surfacing

Buzz score total 30.0

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 22.0 · diversity 8.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Mention score
22.0
8 evidence mentions in the snapshot
Diversity score
8.0
3 sources across 1 categories
KEV score
0.0
No KEV entry observed
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
8 source links · newest first
  • WAGO Industrial Switches affected by multiple flawsSecurity Affairs

    A security expert at SEC Consult discovered that some WAGO industrial managed switches are affected by several serious vulnerabilities. A security researcher at consulting company SEC Consult discovered several vulnerabilities in some models of WAGO industrial switches. The vulnerabilities affect WAGO industrial switches 852-303, 852-1305 and 852-1505 models. The company has already fixed the issues with […]

    newssecurityaffairs.comJun 13, 2019, 9:42 PM
  • Remote Code Execution Flaw Patched in glibc LibrarySecurityWeek

    Researchers have discovered a serious remote code execution vulnerability in the GNU C Library, also known as glibc . glibc, the GNU Project’s implementation of the standard library for the C programming language, is a library used in GNU, Linux and other systems that use Linux as the kernel.

    newswww.securityweek.comFeb 16, 2016, 4:34 PM
  • Oracle Security Update Contains Critical Patches for MySQL, Java SESecurityWeek

    Oracle released a security update with a whopping 98 fixes, including 17 for Oracle Fusion Middleware and 26 for Oracle MySQL.

    newswww.securityweek.comApr 15, 2015, 2:52 PM
  • The GHOST vulnerability is a threat to critical business applicationsSecurity Affairs

    Researchers at Veracode discovered that nearly 41% of enterprise applications using GNU C Library employ the Ghost-ridden ‘gethostbyname’ function. GNU C Library (glibc) vulnerability, named as the GHOST vulnerability, was released by Qualys Guard on 27th January 2015. Severity of this vulnerability is “CRITICAL” and listed in CVE database as CVE-2015-0235. Vulnerability is termed as […]

    newssecurityaffairs.comFeb 8, 2015, 3:45 PM
  • PHP Applications and WordPress exposed to the Ghost flawSecurity Affairs

    PHP applications and WordPress CMS might be affected by the GHOST vulnerability that could be exploit to compromise the hosting servers. The critical GHOST vulnerability (CVE-2015-0235) in the GNU C library (glibc) may have a greater impact than imagined, security experts have discovered that PHP applications, including the popular WordPress Content Management System (CMS), could also […]

    newssecurityaffairs.comJan 31, 2015, 9:09 AM
  • Reactions to the serious vulnerability found in GlibcHelp Net Security

    The Qualys security research team has found a critical vulnerability in the Linux GNU C Library (glibc), that allows attackers to remotely take control of an entire system without having any prior knowledge of system credentials. Here are some of the comments Help Net Security received: HD Moore, Chief Research Officer, Rapid7 Linux-based appliances from a variety of vendors are going to be impacted, though as with most library-level vulnerabilities, the attack surface is still … More →

    newswww.helpnetsecurity.comJan 28, 2015, 9:03 AM
  • Ghost Remote Code Execution Vulnerability scares the Linux communitySecurity Affairs

    The Linux GNU C Library (glibc) versions prior to 2.18 are affected by the GHOST remote code execution vulnerability present in the ‘gethostbyname’ function. A new critical vulnerability is threatening the Linux community, the flaw affects the glibc GNU C library. The vulnerability is present in all Linux systems dating back to 2000 and could […]

    newssecurityaffairs.comJan 28, 2015, 8:32 AM
  • High severity vulnerability found in Linux GNU C libraryHelp Net Security

    The Qualys security research team has found a critical vulnerability in the Linux GNU C Library (glibc), that allows attackers to remotely take control of an entire system without having any prior knowledge of system credentials. Qualys has worked closely with Linux distribution vendors in a coordinated effort to offer a patch for all distributions of Linux systems impacted, which is available today from the corresponding vendors. The vulnerability known as GHOST (CVE-2015-0235) as it … More →

    newswww.helpnetsecurity.comJan 27, 2015, 2:31 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence