Vulnerability Description
The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of service (hang or crash) via unspecified vectors.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Enterprise Linux | 6.7 |
| Redhat | Enterprise Linux Desktop | 7.0 |
| Redhat | Enterprise Linux Hpc Node | 7.0 |
| Redhat | Enterprise Linux Hpc Node Eus | 7.2 |
| Redhat | Enterprise Linux Server | 7.0 |
| Redhat | Enterprise Linux Server Aus | 7.2 |
| Redhat | Enterprise Linux Server Eus | 7.2 |
| Redhat | Enterprise Linux Workstation | 7.0 |
Related Weaknesses (CWE)
References
- http://rhn.redhat.com/errata/RHSA-2016-0176.htmlVendor Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.h
- http://www.securityfocus.com/bid/84172
- https://bugzilla.redhat.com/show_bug.cgi?id=1246713Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1256285Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1293976Vendor Advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10150
- http://rhn.redhat.com/errata/RHSA-2016-0176.htmlVendor Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.h
- http://www.securityfocus.com/bid/84172
- https://bugzilla.redhat.com/show_bug.cgi?id=1246713Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1256285Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1293976Vendor Advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10150
FAQ
What is CVE-2015-5229?
CVE-2015-5229 is a vulnerability with a CVSS score of 7.5 (HIGH). The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which might allow context-dependent attackers to cause a denial of se...
How severe is CVE-2015-5229?
CVE-2015-5229 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-5229?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Enterprise Linux, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Hpc Node, Redhat Enterprise Linux Hpc Node Eus, Redhat Enterprise Linux Server.