Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2015-7547

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.

CVSS 8.1 · HighBuzz score 27.5

Buzz score

Why this CVE is surfacing

Buzz score total 27.5

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 19.5 · diversity 8.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Mention score
19.5
6 evidence mentions in the snapshot
Diversity score
8.0
3 sources across 1 categories
KEV score
0.0
No KEV entry observed
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
6 source links · newest first
  • The hidden information behind 12,000 PoC Exploits shared onlineSecurity Affairs

    A study conducted by Recorded Future on PoC exploits shared online over the last year shows that social media is the main distribution channel. Security experts at the threat intelligence firm Recorded Future have conducted an interesting study on the proof-of-concept exploits shared online (e.g. On Twitter, on forum linking to personal blogs, GitHub, or Pastebin) last year. […]

    newssecurityaffairs.comMay 9, 2016, 11:01 AM
  • PoC Exploits Mainly Distributed via Social MediaSecurityWeek

    An analysis of proof-of-concept (PoC) exploits shared online over the last year has shown that social media is the main distribution channel for PoCs, according to threat intelligence firm Recorded Future. PoCs are developed by both researchers and threat actors — in many cases to demonstrate the existence of a software vulnerability and to show that it’s exploitable.

    newswww.securityweek.comMay 5, 2016, 1:35 PM
  • Siemens Industrial Products Affected by Critical glibc FlawSecurityWeek

    Siemens has informed customers that several of the company’s industrial solutions are plagued by a severe vulnerability in glibc, a library used in many software and hardware products.

    newswww.securityweek.comApr 13, 2016, 2:00 PM
  • VMware Products Affected by Critical glibc FlawSecurityWeek

    A critical remote code execution vulnerability found in the GNU C Library (glibc) affects most Linux systems and many widely used products, including ones from VMware.

    newswww.securityweek.comFeb 23, 2016, 10:00 AM
  • Critical Glibc flaw opens Linux distros, other software and devices to compromiseHelp Net Security

    A critical bug has been found to open an unimaginable number of computers, networking and other connected devices to attacks that can result in complete system compromise. Discovered independently by Google and Red Hat researchers, the bug resides in the GNU C Library (aka “glibc”), the open-source implementation of the C and C++ programming language libraries. Glibc is incorporated in practically every major Linux distribution, many embedded systems, devices like routers, many small-device projects, and … More →

    newswww.helpnetsecurity.comFeb 17, 2016, 10:01 PM
  • Remote Code Execution Flaw Patched in glibc LibrarySecurityWeek

    Researchers have discovered a serious remote code execution vulnerability in the GNU C Library, also known as glibc . glibc, the GNU Project’s implementation of the standard library for the C programming language, is a library used in GNU, Linux and other systems that use Linux as the kernel.

    newswww.securityweek.comFeb 16, 2016, 4:34 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence