Skip to main content
Public proof of conceptFix available

CVE-2015-7547

A public proof of concept exists; no exploitation attested.

  • Published2016-02-18
  • WeaknessCWE-119

Am I affected?

With a domain, we read the version its public headers and pages expose. A distribution build can carry the fix under an older number.

Description

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.

Timeline

dates in UTC
  1. 2016-02-1821:59CVE publishedNVD
  2. 2026-10-2319:23First public proof of conceptPoC-in-GitHub
  3. 2026-10-2319:23EPSS crossed 10 %FIRST EPSS

Observed activity

isMalicious corpus · updated 2026-10-23 21:37 UTC
Indicators tagged with this CVE, per day0 indicators over 7 days
Block these indicators
  • Firewall list (EDL, text): https://api.ismalicious.com/edl/cve/CVE-2015-7547?format=txt
  • CSV export: https://api.ismalicious.com/edl/cve/CVE-2015-7547?format=csv
  • TAXII collection of exploited CVEs
  • The EDL and CSV take an API key on the Pro plan.

Versions per branch

NVD
Gnu glibc
BranchAffectedFixed in
2.9= 2.9no fix published
2.10= 2.10no fix published
2.10= 2.10.1no fix published
2.11= 2.11no fix published
2.11= 2.11.1no fix published
2.11= 2.11.2no fix published
2.11= 2.11.3no fix published
2.12= 2.12no fix published
2.12= 2.12.1no fix published
2.12= 2.12.2no fix published
2.13= 2.13no fix published
2.14= 2.14no fix published
Canonical ubuntu linux
BranchAffectedFixed in
12.4= 12.04no fix published
14.4= 14.04no fix published
15.10= 15.10no fix published
Hp helion openstack
BranchAffectedFixed in
1.1= 1.1.1no fix published
2.0= 2.0.0no fix published
2.1= 2.1.0no fix published

27 more products in the sources.

as publishedRanges as NVD and OSV publish them; a distribution’s build can be fixed under an older number.

Distribution builds and vendor advisories

Packages from OSV.dev and products from the vendors' CSAF advisories.

version not verifiedVersions not verified: read as OSV.dev and the vendors publish them, not checked against each vendor's release list.

Vendor advisories

  • ICSA-16-103-01C CISA5 known affected

    Siemens Industrial Products glibc Library Vulnerability (Update C)

    Siemens ROX II: >=V2.3.0|<=V2.9.0 · Siemens APE (Linux): vers:all/* · Siemens SINEMA Remote Connect: <1.2 · +2 more

Full record on NVD

Fix

  1. Mitigation from the vendor CISA ICSA-16-103-01C · 5 productsSiemens provides updates for the following products and encourages customers to update their products:
  2. Mitigation from the vendor CISA ICSA-16-103-01C · 5 productsROX II: Update to version 2.9.1, Submit a support request online (https://www.siemens.com/automation/support-request)
  3. Mitigation from the vendor CISA ICSA-16-103-01C · 5 productsCall a local hotline center: (https://w3.siemens.com/aspa_app/)
  4. Mitigation from the vendor CISA ICSA-16-103-01C · 5 productsAPE (Linux): Follow update process provided in the corresponding application note: (http://support.automation.siemens.com/WW/view/en/109485761)
  5. Mitigation from the vendor CISA ICSA-16-103-01C · 5 productsBasic RT V13: Update to Version V13 SP 1 Update 9: (https://support.industry.siemens.com/cs/ww/en/view/109311724)
  6. Mitigation from the vendor CISA ICSA-16-103-01C · 5 productsSINEMA Remote Connect software update for Version 1.2 is available at the following link: (https://support.industry.siemens.com/cs/ww/en/view/109737963)

Advisories and patches

Detection

read 2026-10-23 19:23 UTC
Nuclei template
none so far
ProjectDiscovery
Exploit-DB
no entry
Exploit-DB
Proof-of-concept repositories
11 repositories, unverifiedfjserna/CVE-2015-7547cakuzo/CVE-2015-7547t0r0t0r0/CVE-2015-7547rexifiles/rex-sec-glibcbabykillerblack/CVE-2015-7547
PoC-in-GitHub

Sources

  • NVDCVSS 3.08.1read 2026-10-23
  • NVDCVSS 2.06.8read 2026-10-23
  • NVDweakness (CWE)CWE-119read 2026-10-23
  • FIRST EPSSEPSS score91.0 %read 2026-10-23
  • PoC-in-GitHubproof of concept11read 2026-10-23

Technical details

CVSS v3 Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
2016-02-18
Last Modified
2026-06-17
NVD status
Modified

Frequently asked questions

What is CVE-2015-7547?

Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.

Is CVE-2015-7547 actively exploited?

Active exploitation of CVE-2015-7547 has not been confirmed. Its EPSS score was 91.0% on 2026-10-23, the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2015-7547?

CVE-2015-7547 has a CVSS v3 base score of 8.1 (HIGH severity), with vector string CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Hear about the next vulnerability in your software

Surveillance reads the versions in your stack — a domain, a lockfile or a list — checks each CVE against the ranges its sources publish, and alerts you when one you run is exploited or enters CISA KEV. A version it cannot read stays « version not verified ».

Get alerts for this productCISA KEV additions, October 2026Search CVEs

No credit card required · No monthly cap on website lookups · 250 API requests/month

Go further

Related vulnerabilities

Same product first, then the same vendor advisory and the same publication week.

Back to CVE Database