CVE-2015-5277: canonical ubuntu_linux
Vulnerability summary
CVE-2015-5277 is a high (CVSS 7.2) vulnerability in canonical ubuntu_linux. EPSS estimates a 0.59% chance of exploitation in the next 30 days, higher than 48.1% of scored vulnerabilities.
Not severe (CVSS 7.2, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 2 · Related 1Timeline
- 17-12-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The get_contents function in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) before 2.20 might allow local users to cause a denial of service (heap corruption) or gain privileges via a long line in the NSS files database.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.59%
Chance of exploitation in the next 30 days
Percentile
48%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.59% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat13 products
- enterprise_linux_desktop7.0
- enterprise_linux_hpc_node7.0
- enterprise_linux_server7.0
- enterprise_linux_workstation7.0
- glibc< 0:2.17-106.el7_2.1
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 15.10
Debian1 product
- glibc< 2.21-1
Gnu1 product
- glibc≤ 2.19
Ubuntu1 product
- eglibc< 2.19-0ubuntu6.8
5 vendors · 17 products
References
22 links- www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlX Refsource CONFIRM
