The wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$((`...`))".

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - glibc: Incorrect handling of RPATH in elf/dl-load.c can be used to execute code loaded from arbitrary     libraries (CVE-2017-16997)

  - glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-     read (CVE-2019-9169)

  - In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses     alternatives, which allows attackers to cause a denial of service (assertion failure and application exit)     or trigger an incorrect result by attempting a regular-expression match. (CVE-2009-5155)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote host is affected by the vulnerability described in GLSA-201602-02 (GNU C Library: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in the GNU C Library:
      The Google Security Team and Red Hat discovered a stack-based buffer         overflow in the send_dg() and send_vc() functions due to a buffer         mismanagement when getaddrinfo() is called with AF_UNSPEC         (CVE-2015-7547).
      The strftime() function access invalid memory when passed         out-of-range data, resulting in a crash (CVE-2015-8776).
      An integer overflow was found in the __hcreate_r() function         (CVE-2015-8778).
      Multiple unbounded stack allocations were found in the catopen()         function (CVE-2015-8779).
    Please review the CVEs referenced below for additional vulnerabilities       that had already been fixed in previous versions of sys-libs/glibc, for       which we have not issued a GLSA before.
  Impact :

    A remote attacker could exploit any application which performs host name       resolution using getaddrinfo() in order to execute arbitrary code or       crash the application. The other vulnerabilities can possibly be       exploited to cause a Denial of Service or leak information.
  Workaround :

    A number of mitigating factors for CVE-2015-7547 have been identified.
      Please review the upstream advisory and references below.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - Update fix for CVE-2015-7547 (#1296028).

  - Create helper threads with enough stack for POSIX AIO     and timers (#1301625).

  - Fix CVE-2015-7547: getaddrinfo stack-based buffer     overflow (#1296028).

  - Support loading more libraries with static TLS     (#1291270).

  - Check for NULL arena pointer in _int_pvalloc (#1256890).

  - Don't change no_dyn_threshold on mallopt failure     (#1256891).

  - Unlock main arena after allocation in calloc (#1256812).

  - Enable robust malloc change again (#1256812).

  - Fix perturbing in malloc on free and simply perturb_byte     (#1256812).

  - Don't fall back to mmap prematurely (#1256812).

  - The malloc deadlock avoidance support has been     temporarily removed since it triggers deadlocks in     certain applications (#1244002).

  - Fix ruserok check to reject, not skip, negative user     checks (#1217186).

  - Optimize ruserok function for large ~/.rhosts     (#1217186).

  - Fix crash in valloc due to the backtrace deadlock fix     (#1207236).

  - Fix buffer overflow in gethostbyname_r with misaligned     buffer (#1209376, CVE-2015-1781).

  - Avoid deadlock in malloc on backtrace (#1066724).

  - Support running applications that use Intel AVX-512     (#1195453).

  - Silence logging of record type mismatch for DNSSEC     records (#1088301).

  - Shrink heap on free when vm.overcommit_memory == 2     (#867679).

  - Enhance nscd to detect any configuration file changes     (#859965).

  - Fix __times handling of EFAULT when buf is NULL     (#1124204).

  - Fix memory leak with dlopen and thread-local storage     variables (#978098).

  - Prevent getaddrinfo from writing DNS queries to random     fd (CVE-2013-7423, - Implement userspace half of in6.h     header coordination (#1053178).

  - Correctely size relocation cache used by profiler     (#1144132).

  - Fix reuse of cached stack leading to bounds overrun of     DTV (#1116050).

  - Return failure in getnetgrent only when all netgroups     have been searched (#1085312).

  - Fix valgrind warning in nscd_stats (#1091915).

  - Initialize xports array (#1159167).

  - Fix tst-default-attr test to not fail on powerpc     (#1023306).

  - Fix parsing of numeric hosts in gethostbyname_r     (CVE-2015-0235, #1183534).

  - Fix typo in nscd/selinux.c (#1125307).

  - Actually run test-iconv modules (#1176907).

  - Fix recursive dlopen (#1154563).

  - Fix crashes on invalid input in IBM gconv modules     (CVE-2014-6040, #1172044).

  - Fix wordexp to honour WRDE_NOCMD (CVE-2014-7817,     #1171296).

  - Fix typo in res_send and res_query (#rh1138769).

The wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing '$((`...`))'.

glibc has been updated to fix four security issues :

  - CVE-2014-0475: Directory traversal in locale environment     handling (bnc#887022)

  - CVE-2014-7817: wordexp failed to honour WRDE_NOCMD     (bsc#906371)

  - CVE-2014-9402: Avoid infinite loop in nss_dns     getnetbyname (bsc#910599)

  - CVE-2015-1472: Fixed buffer overflow in wscanf     (bsc#916222)

  - CVE-2013-7423: getaddrinfo() wrote DNS queries to random     file descriptors under high load. (bnc#915526)

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

glibc has been updated to fix four security issues :

  - CVE-2014-0475: Directory traversal in locale environment     handling (bnc#887022)

  - CVE-2014-7817: wordexp failed to honour WRDE_NOCMD     (bsc#906371)

  - CVE-2014-9402: Avoid infinite loop in nss_dns     getnetbyname (bsc#910599)

  - CVE-2015-1472: Fixed buffer overflow in wscanf     (bsc#916222)

This non-security issue has been fixed :

  - Fix missing zero termination (bnc#918233)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

glibc has been updated to fix four security issues.

These security issues were fixed :

  - CVE-2014-7817: The wordexp function in GNU C Library     (aka glibc) 2.21 did not enforce the WRDE_NOCMD flag,     which allowed context-dependent attackers to execute     arbitrary commands, as demonstrated by input containing     '$((`...`))' (bnc#906371).

  - CVE-2015-1472: Heap buffer overflow in glibc swscanf     (bnc#916222).

  - CVE-2014-9402: Denial of service in getnetbyname     function (bnc#910599).

  - CVE-2013-7423: Getaddrinfo() writes DNS queries to     random file descriptors under high load (bnc#915526).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated glibc packages fix security vulnerabilities :

Stephane Chazelas discovered that directory traversal issue in locale handling in glibc. glibc accepts relative paths with .. components in the LC_* and LANG variables. Together with typical OpenSSH configurations (with suitable AcceptEnv settings in sshd_config), this could conceivably be used to bypass ForceCommand restrictions (or restricted shells), assuming the attacker has sufficient level of access to a file system location on the host to create crafted locale definitions there (CVE-2014-0475).

David Reid, Glyph Lefkowitz, and Alex Gaynor discovered a bug where posix_spawn_file_actions_addopen fails to copy the path argument (glibc bz #17048) which can, in conjunction with many common memory management techniques from an application, lead to a use after free, or other vulnerabilities (CVE-2014-4043).

This update also fixes the following issues: x86: Disable x87 inline functions for SSE2 math (glibc bz #16510) malloc: Fix race in free() of fastbin chunk (glibc bz #15073)

Tavis Ormandy discovered a heap-based buffer overflow in the transliteration module loading code. As a result, an attacker who can supply a crafted destination character set argument to iconv-related character conversation functions could achieve arbitrary code execution.

This update removes support of loadable gconv transliteration modules.
Besides the security vulnerability, the module loading code had functionality defects which prevented it from working for the intended purpose (CVE-2014-5119).

Adhemerval Zanella Netto discovered out-of-bounds reads in additional code page decoding functions (IBM933, IBM935, IBM937, IBM939, IBM1364) that can be used to crash the systems, causing a denial of service conditions (CVE-2014-6040).

The function wordexp() fails to properly handle the WRDE_NOCMD flag when processing arithmetic inputs in the form of '$((... ))' where '...' can be anything valid. The backticks in the arithmetic epxression are evaluated by in a shell even if WRDE_NOCMD forbade command substitution. This allows an attacker to attempt to pass dangerous commands via constructs of the above form, and bypass the WRDE_NOCMD flag. This update fixes the issue (CVE-2014-7817).

The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not properly restrict the use of the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers (CVE-2012-3406).

The nss_dns implementation of getnetbyname could run into an infinite loop if the DNS response contained a PTR record of an unexpected format (CVE-2014-9402).

Also glibc lock elision (new feature in glibc 2.18) has been disabled as it can break glibc at runtime on newer Intel hardware (due to hardware bug)

Under certain conditions wscanf can allocate too little memory for the to-be-scanned arguments and overflow the allocated buffer (CVE-2015-1472).

The incorrect use of '__libc_use_alloca (newsize)' caused a different (and weaker) policy to be enforced which could allow a denial of service attack (CVE-2015-1473).

CVE-2012-6656

Fix validation check when converting from ibm930 to utf. When converting IBM930 code with iconv(), if IBM930 code which includes invalid multibyte character '0xffff' is specified, then iconv() segfaults.

CVE-2014-6040

Crashes on invalid input in IBM gconv modules [BZ #17325] These changes are based on the fix for BZ #14134 in commit 6e230d11837f3ae7b375ea69d7905f0d18eb79e5.

CVE-2014-7817

The function wordexp() fails to properly handle the WRDE_NOCMD flag when processing arithmetic inputs in the form of '$((... ``))' where '...' can be anything valid. The backticks in the arithmetic epxression are evaluated by in a shell even if WRDE_NOCMD forbade command substitution. This allows an attacker to attempt to pass dangerous commands via constructs of the above form, and bypass the WRDE_NOCMD flag. This patch fixes this by checking for WRDE_NOCMD in exec_comm(), the only place that can execute a shell. All other checks for WRDE_NOCMD are superfluous and removed.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

glibc has ben updated to fix three security issues :

  - wordexp failed to honour WRDE_NOCMD (bsc#906371).
    (CVE-2014-7817)

  - Fixed invalid file descriptor reuse while sending DNS     query (bsc#915526). (CVE-2013-7423)

  - Fixed buffer overflow in wscanf (bsc#916222) These     non-security issues have been fixed:. (CVE-2015-1472)

  - Remove inaccurate assembler implementations of ceill,     floorl, nearbyintl, roundl, truncl for PowerPC64     (bsc#917072)

  - Don't return IPv4 addresses when looking for IPv6     addresses only (bsc#904461)

- Fix CVE-2014-6040: crash in code page decoding functions     (IBM933, IBM935, IBM937, IBM939, IBM1364)

  - Fix CVE-2014-7817: command execution in wordexp() with     WRDE_NOCMD specified

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Fix CVE-2014-7817 glibc: command execution in wordexp()     with WRDE_NOCMD specified

    - Fix CVE-2014-9402 glibc: denial of service in       getnetbyname function

    - CVE-2015-1472 glibc: heap buffer overflow in glibc       swscanf

    - Fix segfault when LD_LIBRARY_PATH is set to       non-existent directory.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Glibc was updated to fix several security issues.

  - Avoid infinite loop in nss_dns getnetbyname     (CVE-2014-9402, bsc#910599, BZ #17630)

  - wordexp fails to honour WRDE_NOCMD (CVE-2014-7817,     bsc#906371, BZ #17625)

  - Fix invalid file descriptor reuse while sending DNS     query (CVE-2013-7423, bsc#915526, BZ #15946)

  - Fix buffer overflow in wscanf (CVE-2015-1472,     bsc#916222, BZ #16618)

Several vulnerabilities have been fixed in eglibc, Debian's version of the GNU C library :

  - CVE-2015-0235     Qualys discovered that the gethostbyname and     gethostbyname2 functions were subject to a buffer     overflow if provided with a crafted IP address argument.
    This could be used by an attacker to execute arbitrary     code in processes which called the affected functions.

  The original glibc bug was reported by Peter Klotz.

  - CVE-2014-7817     Tim Waugh of Red Hat discovered that the WRDE_NOCMD     option of the wordexp function did not suppress command     execution in all cases. This allows a context-dependent     attacker to execute shell commands.

  - CVE-2012-6656 CVE-2014-6040     The charset conversion code for certain IBM multi-byte     code pages could perform an out-of-bounds array access,     causing the process to crash. In some scenarios, this     allows a remote attacker to cause a persistent denial of     service.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - Fix recursive dlopen (#1173469).

  - Fix typo in res_send and res_query (#rh1172023).

  - Fix crashes on invalid input in IBM gconv modules     (CVE-2014-6040, #1139571).

  - Fix wordexp to honour WRDE_NOCMD (CVE-2014-7817,     #1170121).

An out-of-bounds read flaw was found in the way glibc's iconv() function converted certain encoded data to UTF-8. An attacker able to make an application call the iconv() function with a specially crafted argument could use this flaw to crash that application.
(CVE-2014-6040)

It was found that the wordexp() function would perform command substitution even when the WRDE_NOCMD flag was specified. An attacker able to provide specially crafted input to an application using the wordexp() function, and not sanitizing the input correctly, could potentially use this flaw to execute arbitrary commands with the credentials of the user running that application. (CVE-2014-7817)

An out-of-bounds read flaw was found in the way glibc's iconv() function converted certain encoded data to UTF-8. An attacker able to make an application call the iconv() function with a specially crafted argument could use this flaw to crash that application.
(CVE-2014-6040)

It was found that the wordexp() function would perform command substitution even when the WRDE_NOCMD flag was specified. An attacker able to provide specially crafted input to an application using the wordexp() function, and not sanitizing the input correctly, could potentially use this flaw to execute arbitrary commands with the credentials of the user running that application. (CVE-2014-7817)

This update also fixes the following bugs :

  - Previously, when an address lookup using the     getaddrinfo() function for the AF_UNSPEC value was     performed on a defective DNS server, the server in some     cases responded with a valid response for the A record,     but a referral response for the AAAA record, which     resulted in a lookup failure. A prior update was     implemented for getaddrinfo() to return the valid     response, but it contained a typographical error, due to     which the lookup could under some circumstances still     fail. This error has been corrected and getaddrinfo()     now returns a valid response in the described     circumstances.

  - An error in the dlopen() library function previously     caused recursive calls to dlopen() to terminate     unexpectedly or to abort with a library assertion. This     error has been fixed and recursive calls to dlopen() no     longer crash or abort.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:0016 advisory.

    The glibc packages provide the standard C libraries (libc), POSIX thread     libraries (libpthread), standard math libraries (libm), and the Name Server     Caching Daemon (nscd) used by multiple programs on the system. Without     these libraries, the Linux system cannot function correctly.

    An out-of-bounds read flaw was found in the way glibc's iconv() function     converted certain encoded data to UTF-8. An attacker able to make an     application call the iconv() function with a specially crafted argument     could use this flaw to crash that application. (CVE-2014-6040)

    It was found that the wordexp() function would perform command substitution     even when the WRDE_NOCMD flag was specified. An attacker able to provide     specially crafted input to an application using the wordexp() function, and     not sanitizing the input correctly, could potentially use this flaw to     execute arbitrary commands with the credentials of the user running that     application. (CVE-2014-7817)

    The CVE-2014-7817 issue was discovered by Tim Waugh of the Red Hat     Developer Experience Team.

    This update also fixes the following bugs:

    * Previously, when an address lookup using the getaddrinfo() function for     the AF_UNSPEC value was performed on a defective DNS server, the server in     some cases responded with a valid response for the A record, but a referral     response for the AAAA record, which resulted in a lookup failure. A prior     update was implemented for getaddrinfo() to return the valid response, but     it contained a typographical error, due to which the lookup could under     some circumstances still fail. This error has been corrected and     getaddrinfo() now returns a valid response in the described circumstances.
    (BZ#1172023)

    * An error in the dlopen() library function previously caused recursive     calls to dlopen() to terminate unexpectedly or to abort with a library     assertion. This error has been fixed and recursive calls to dlopen() no     longer crash or abort. (BZ#1173469)

    All glibc users are advised to upgrade to these updated packages, which     contain backported patches to correct these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0016 advisory.

    - Fix crashes on invalid input in IBM gconv modules (CVE-2014-6040, #1139571).

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated glibc packages that fix two security issues and two bugs are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the Name Server Caching Daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

An out-of-bounds read flaw was found in the way glibc's iconv() function converted certain encoded data to UTF-8. An attacker able to make an application call the iconv() function with a specially crafted argument could use this flaw to crash that application.
(CVE-2014-6040)

It was found that the wordexp() function would perform command substitution even when the WRDE_NOCMD flag was specified. An attacker able to provide specially crafted input to an application using the wordexp() function, and not sanitizing the input correctly, could potentially use this flaw to execute arbitrary commands with the credentials of the user running that application. (CVE-2014-7817)

The CVE-2014-7817 issue was discovered by Tim Waugh of the Red Hat Developer Experience Team.

This update also fixes the following bugs :

* Previously, when an address lookup using the getaddrinfo() function for the AF_UNSPEC value was performed on a defective DNS server, the server in some cases responded with a valid response for the A record, but a referral response for the AAAA record, which resulted in a lookup failure. A prior update was implemented for getaddrinfo() to return the valid response, but it contained a typographical error, due to which the lookup could under some circumstances still fail. This error has been corrected and getaddrinfo() now returns a valid response in the described circumstances. (BZ#1172023)

* An error in the dlopen() library function previously caused recursive calls to dlopen() to terminate unexpectedly or to abort with a library assertion. This error has been fixed and recursive calls to dlopen() no longer crash or abort. (BZ#1173469)

All glibc users are advised to upgrade to these updated packages, which contain backported patches to correct these issues.

It was found that the wordexp() function would perform command substitution even when the WRDE_NOCMD flag was specified. An attacker able to provide specially crafted input to an application using the wordexp() function, and not sanitizing the input correctly, could potentially use this flaw to execute arbitrary commands with the credentials of the user running that application. (CVE-2014-7817)

This update also fixes the following bug :

  - Prior to this update, if a file stream that was opened     in append mode and its underlying file descriptor were     used at the same time and the file was truncated using     the ftruncate() function on the file descriptor, a     subsequent ftell() call on the stream incorrectly     modified the file offset by seeking to the new end of     the file. This update ensures that ftell() modifies the     state of the file stream only when it is in append mode     and its buffer is not empty. As a result, the described     incorrect changes to the file offset no longer occur.

Updated glibc packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the Name Server Caching Daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

It was found that the wordexp() function would perform command substitution even when the WRDE_NOCMD flag was specified. An attacker able to provide specially crafted input to an application using the wordexp() function, and not sanitizing the input correctly, could potentially use this flaw to execute arbitrary commands with the credentials of the user running that application. (CVE-2014-7817)

This issue was discovered by Tim Waugh of the Red Hat Developer Experience Team.

This update also fixes the following bug :

* Prior to this update, if a file stream that was opened in append mode and its underlying file descriptor were used at the same time and the file was truncated using the ftruncate() function on the file descriptor, a subsequent ftell() call on the stream incorrectly modified the file offset by seeking to the new end of the file. This update ensures that ftell() modifies the state of the file stream only when it is in append mode and its buffer is not empty. As a result, the described incorrect changes to the file offset no longer occur.
(BZ#1170187)

All glibc users are advised to upgrade to these updated packages, which contain backported patches to correct these issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:2023 advisory.

  - glibc: command execution in wordexp() with WRDE_NOCMD specified (CVE-2014-7817)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-2023 advisory.

    - Fix wordexp() to honour WRDE_NOCMD (CVE-2014-7817, #1170118)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2432-1 advisory.

    Siddhesh Poyarekar discovered that the GNU C Library incorrectly handled certain multibyte characters when     using the iconv function. An attacker could possibly use this issue to cause applications to crash,     resulting in a denial of service. This issue only affected Ubuntu 10.04 LTS and Ubuntu 12.04 LTS.
    (CVE-2012-6656)

    Adhemerval Zanella Netto discovered that the GNU C Library incorrectly handled certain multibyte     characters when using the iconv function. An attacker could possibly use this issue to cause applications     to crash, resulting in a denial of service. (CVE-2014-6040)

    Tim Waugh discovered that the GNU C Library incorrectly enforced the WRDE_NOCMD flag when handling the     wordexp function. An attacker could possibly use this issue to execute arbitrary commands. (CVE-2014-7817)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated glibc package fixes security vulnerability :

The function wordexp fails to properly handle the WRDE_NOCMD flag when processing arithmetic inputs in the form of $((... ``)) where ...
can be anything valid. The backticks in the arithmetic epxression are evaluated by in a shell even if WRDE_NOCMD forbade command substitution. This allows an attacker to attempt to pass dangerous commands via constructs of the above form, and bypass the WRDE_NOCMD flag. This update fixes the issue (CVE-2014-7817).

ID	Name	Product	Family	Severity
199014	RHEL 5 : glibc (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
88822	GLSA-201602-02 : GNU C Library: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
88783	OracleVM 3.3 : glibc (OVMSA-2016-0013) (GHOST)	Nessus	OracleVM Local Security Checks	high
86008	F5 Networks BIG-IP : GNU C Library (glibc) vulnerability (SOL16010)	Nessus	F5 Networks Local Security Checks	medium
83705	SUSE SLES11 Security Update : glibc (SUSE-SU-2015:0551-1)	Nessus	SuSE Local Security Checks	high
83704	SUSE SLES10 Security Update : glibc (SUSE-SU-2015:0550-1)	Nessus	SuSE Local Security Checks	high
83701	SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2015:0526-1)	Nessus	SuSE Local Security Checks	high
82421	Mandriva Linux Security Advisory : glibc (MDVSA-2015:168)	Nessus	Mandriva Local Security Checks	high
82242	Debian DLA-97-1 : eglibc security update	Nessus	Debian Local Security Checks	medium
81667	SuSE 11.3 Security Update : glibc (SAT Patch Number 10357)	Nessus	SuSE Local Security Checks	high
81616	Fedora 20 : glibc-2.18-19.fc20 (2015-2845)	Nessus	Fedora Local Security Checks	medium
81615	Fedora 21 : glibc-2.20-8.fc21 (2015-2837)	Nessus	Fedora Local Security Checks	high
81560	openSUSE Security Update : glibc (openSUSE-2015-173)	Nessus	SuSE Local Security Checks	high
81029	Debian DSA-3142-1 : eglibc - security update	Nessus	Debian Local Security Checks	high
80439	OracleVM 3.3 : glibc (OVMSA-2015-0003)	Nessus	OracleVM Local Security Checks	medium
80419	Amazon Linux AMI : glibc (ALAS-2015-468)	Nessus	Amazon Linux Local Security Checks	medium
80409	Scientific Linux Security Update : glibc on SL6.x i386/x86_64 (20150107)	Nessus	Scientific Linux Local Security Checks	medium
80408	RHEL 6 : glibc (RHSA-2015:0016)	Nessus	Red Hat Local Security Checks	high
80407	Oracle Linux 6 : glibc (ELSA-2015-0016)	Nessus	Oracle Linux Local Security Checks	high
80400	CentOS 6 : glibc (CESA-2015:0016)	Nessus	CentOS Local Security Checks	medium
80162	Scientific Linux Security Update : glibc on SL7.x x86_64 (20141218)	Nessus	Scientific Linux Local Security Checks	medium
80123	CentOS 7 : glibc (CESA-2014:2023)	Nessus	CentOS Local Security Checks	medium
80116	RHEL 7 : glibc (RHSA-2014:2023)	Nessus	Red Hat Local Security Checks	critical
80114	Oracle Linux 7 : glibc (ELSA-2014-2023)	Nessus	Oracle Linux Local Security Checks	critical
79718	Ubuntu 14.04 LTS : GNU C Library vulnerabilities (USN-2432-1)	Nessus	Ubuntu Local Security Checks	high
79612	Mandriva Linux Security Advisory : glibc (MDVSA-2014:232)	Nessus	Mandriva Local Security Checks	medium

Detections

Analytics

CVE-2014-7817

critical

Tenable Plugins

critical

critical

high

medium

high

high

high

high

medium

high

medium

high

high

high

medium

medium

medium

high

high

medium

medium

medium

critical

critical

high

medium