ALAS-2015-493

Affected Products

Exploit Intelligence

• Test wether you're exposed to ghost (CVE-2015-0235). All kudos go to Qualys Security (github-poc-repo)
• A chef cookbook to test the GHOST vulnerability (github-poc-repo)
• Ansible playbook, to check for CVE-2015-0235 (GHOST) vulnerability (github-poc-repo)
• CVE-2015-0235 patches lenny libc6 packages for amd64 (github-poc-repo)
• Ansible playbook to check vulnerability for CVE-2015-0235 (github-poc-repo)
• cookbook for update glibc. CVE-2015-0235(GHOST) (github-poc-repo)
• gethostbyname*() buffer overflow exploit in glibc - CVE-2015-0235 https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability (github-poc-repo)
• glibc gethostbyname bug (github-poc-repo)
• Script to test vulnarability for CVE-2015-0235 (github-poc-repo)
• A shared library wrapper with additional checks for vulnerable functions gethostbyname2_r gethostbyname_r (GHOST vulnerability) (github-poc-repo)

…and 6 more exploits

Timeline

• Mar 13, 2015 CVE Published

References

• ALAS-2015-493: php54 (critical) advisory