CVE:CVE-2015-0235
CNNVD:CNNVD-201501-658
GNU glibc（又名GNU C Library，libc6）是一种按照LGPL许可协议发布的开源免费的C语言编译程序。
GNU glibc 2.2版本和2.18之前2.x版本中的‘__nss_hostname_digits_dots’函数存在基于堆的缓冲区溢出漏洞。本地和远程攻击者都可通过调用‘ gethostbyname*()’函数利用该漏洞以运行应用程序的用户权限执行任意代码，控制系统。
solution:Upgrade gnu glibc to a higher version than 2.18,and avoid the version [2.0,2.18); Upgrade oracle communications_application_session_controller to a higher version than 3.7.1,and avoid the version (,3.7.1); Upgrade oracle communications_eagle_application_processor to a higher version than 16.0,and avoid the version 16.0; Upgrade oracle communications_eagle_lnp_application_processor to a higher version than 10.0,and avoid the version 10.0; Upgrade oracle communications_lsms to a higher version than 13.1,and avoid the version 13.1; Upgrade oracle communications_policy_management to a higher version than 9.7.3,9.9.1,10.4.1,11.5,12.1.1,and avoid the version 9.7.3,9.9.1,10.4.1,11.5,12.1.1; Upgrade oracle communications_session_border_controller to a higher version than 7.2.0,7.2.0,8.0.0,and avoid the version (,7.2.0),7.2.0,8.0.0; Upgrade oracle communications_user_data_repository to a higher version than 10.0.1,and avoid the version [10.0.0,10.0.1]; Upgrade oracle communications_webrtc_session_controller to a higher version than 7.0,7.1,7.2,and avoid the version 7.0,7.1,7.2; Upgrade oracle exalogic_infrastructure to a higher version than 1.0,2.0,and avoid the version 1.0,2.0; Upgrade oracle vm_virtualbox to a higher version than 5.1.24,and avoid the version (,5.1.24); Upgrade oracle linux to a higher version than 5,7:0,and avoid the version 5,7:0; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat virtualization to a higher version than 6.0,and avoid the version 6.0; Upgrade apple mac_os_x to a higher version than 10.11.1,and avoid the version (,10.11.1); Upgrade ibm pureapplication_system to a higher version than 1.0.0.0,1.1.0.0,2.0.0.0,and avoid the version 1.0.0.0,1.1.0.0,2.0.0.0; Upgrade ibm security_access_manager_for_enterprise_single_sign-on to a higher version than 8.2,and avoid the version 8.2; Upgrade php php to a higher version than 5.4.38,5.5.22,5.6.6,and avoid the version [5.4.0,5.4.38),[5.5.0,5.5.22),[5.6.0,5.6.6)