What is CVE-2015-7547?

CVE-2015-7547 is a security advisory published by Palo Alto Networks Security Advisories with High severity. CVE-2015-7547 Glibc DNS Resolver Vulnerability

Which CVE IDs does CVE-2015-7547 cover?

CVE-2015-7547 covers the following CVE IDs: CVE-2015-7547. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2015-7547?

CVE-2015-7547 affects 1 product, including: PAN-OS.

CVE-2015-7547High

CVE-2015-7547 Glibc DNS Resolver Vulnerability

Vendor

Palo Alto Networks Security Advisories

Published

August 15, 2016

Last Modified

August 15, 2016

🔗 CVE IDs covered (1)

CVE-2015-7547 →

📋 Description

A vulnerability in the GNU libc (glibc) DNS resolver allows remote code execution (CVE-2015-7547). However, this issue can be exploited only from a DNS server that is under the control of an attacker. (Ref # 91886). This glibc issue is only exploitable by an attacker controlling the DNS server configured for the device. Furthermore, the attacker must overcome additional anti-exploitation mitigations, such as ASLR, to mount a successful attack. This issue affects PAN-OS 5.0.19 and earlier; PAN-OS 5.1.12 and earlier; PAN-OS 6.0.14 and earlier; PAN-OS 6.1.12 and earlier; PAN-OS 7.0.7 and earlier; PAN-OS 7.1.3 and earlier

🎯 Affected products1

PAN-OS

✅ Remediation

PAN-OS 5.0.20 and later; PAN-OS 5.1.13 and later; PAN-OS 6.0.15 and later; PAN-OS 6.1.13 and later; PAN-OS 7.0.8 and later; PAN-OS 7.1.4 and later Workarounds and mitigations: This vulnerability can affect PAN-OS software only when the device is configured with a DNS server that is under the control of an attacker. Palo Alto Networks discourages configuring the device with untrusted DNS servers.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2015-7547