CVE-2015-0235: A GHOST in the Machine

Summary: On January 27, 2015, Qualys published information on a 0-day buffer overflow in the GNU C library's __nss_hostname_digits_dots() function, tracked as CVE-2015-0235 and named GHOST. Qualys detailed a remote exploit against the Exim mail server that bypasses all existing protections and results in arbitrary command execution, and said it intends to release the exploit as a Metasploit module.
Bottom line: A patch for this bug has existed since May 21, 2013, but the security implications were not recognized when it was written, so any system left unpatched since then carries a flaw whose public Metasploit module was imminent at the time of writing.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2015-0235
Related: GHOST Vulnerability CVE-2015-0235 | Linux glibc RCE Bug | Qualys Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026