Debian Security Advisory
DLA-230-1 eglibc -- LTS security update
- Date Reported:
- 27 May 2015
- Affected Packages:
- eglibc
- Vulnerable:
- Yes
- Security database references:
- In Mitre's CVE dictionary: CVE-2015-1781.
- More information:
-
Arjun Shankar of Red Hat discovered that gethostbyname_r and related functions compute the size of an input buffer incorrectly if the passed-in buffer is misaligned. This results in a buffer overflow.
For the oldoldstable distribution (squeeze), this problem has been fixed in version 2.11.3-4+deb6u6.
