| Package | Affected versions | Patched versions |
|---|---|---|
| big-ip access policy manager | = 12.0.0 | |
| big-ip advanced firewall manager | = 12.0.0 | |
| big-ip analytics | = 12.0.0 | |
| big-ip application acceleration manager | = 12.0.0 | |
| big-ip application security manager | = 12.0.0 | |
| big-ip domain name system | = 12.0.0 | |
| big-ip link controller | = 12.0.0 | |
| big-ip local traffic manager | = 12.0.0 | |
| big-ip policy enforcement manager | = 12.0.0 | |
| glibc | = 2.10= 2.10.1= 2.11= 2.11.1= 2.11.2= 2.11.3= 2.12= 2.12.1= 2.12.2= 2.13= 2.14= 2.14.1= 2.15= 2.16= 2.17= 2.18= 2.19= 2.20= 2.21= 2.22= 2.9 | |
| helion openstack | = 1.1.1= 2.0.0= 2.1.0 | |
| server migration pack | = 7.5 | |
| exalogic infrastructure | = 1.0= 2.0 | |
| unified threat management software | = 9.319= 9.355 | |
| linux enterprise debuginfo | = 11.0 |
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free