{"metadata": {"vulnerability": "CVE-2015-7547", "count": 191, "kinds": {"milestone": 24, "sighting": 9, "kev": 0, "other": 158}}, "data": [{"timestamp": "2015-07-13T00:00:00Z", "date_only": false, "value": "2015-07-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2015-7547", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2015-08-21T00:00:00Z", "date_only": false, "value": "2015-08-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2016_0176", "record": "RHSA-2016_0176", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2015-08-24T00:00:00Z", "date_only": false, "value": "2015-08-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2016_0176", "record": "RHSA-2016_0176", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2015-09-29T00:00:00Z", "date_only": false, "value": "2015-09-29T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2015-7547", "field": "cveMetadata.dateReserved"}, {"timestamp": "2015-12-11T00:00:00Z", "date_only": false, "value": "2015-12-11T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2016:0175", "record": "RHSA-2016:0175", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2015-12-11T00:00:00Z", "date_only": false, "value": "2015-12-11T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2016:0225", "record": "RHSA-2016:0225", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2015-12-11T00:00:00Z", "date_only": false, "value": "2015-12-11T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2016:0277", "record": "RHSA-2016:0277", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2015-12-11T00:00:00Z", "date_only": false, "value": "2015-12-11T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2016_0175", "record": "RHSA-2016_0175", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2015-12-11T00:00:00Z", "date_only": false, "value": "2015-12-11T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2016_0176", "record": "RHSA-2016_0176", "field": "vulnerabilities.1.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2015-12-11T00:00:00Z", "date_only": false, "value": "2015-12-11T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2016_0225", "record": "RHSA-2016_0225", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2015-12-11T00:00:00Z", "date_only": false, "value": "2015-12-11T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2016_0277", "record": "RHSA-2016_0277", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2016-01-14T07:00:00Z", "date_only": false, "value": "2016-01-14T07:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-16-103-01C", "record": "ICSA-16-103-01C", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-01-14T07:00:00Z", "date_only": false, "value": "2016-01-14T07:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-16-103-01C", "record": "ICSA-16-103-01C", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T00:00:00Z", "date_only": false, "value": "2016-02-16T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2016:0176", "record": "RHSA-2016:0176", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-02-16T00:00:00Z", "date_only": false, "value": "2016-02-16T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2016:0176", "record": "RHSA-2016:0176", "field": "document.tracking.generator.date"}, {"timestamp": "2016-02-16T00:00:00Z", "date_only": false, "value": "2016-02-16T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 RHSA-2016:0176", "record": "RHSA-2016:0176", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2016-02-16T00:00:00Z", "date_only": false, "value": "2016-02-16T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2016:0176", "record": "RHSA-2016:0176", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T00:00:00Z", "date_only": false, "value": "2016-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/39454", "record": "CVE-2015-7547", "field": "creation_timestamp", "uuid": "20f86e90-b15a-4c27-8413-ad366d3a46ea", "url": "https://www.exploit-db.com/exploits/39454", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2016-02-16T00:00:00Z", "date_only": false, "value": "2016-02-16T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2016:0175", "record": "RHSA-2016:0175", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T00:00:00Z", "date_only": false, "value": "2016-02-16T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2016:0225", "record": "RHSA-2016:0225", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T00:00:00Z", "date_only": false, "value": "2016-02-16T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2016:0277", "record": "RHSA-2016:0277", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T00:00:00Z", "date_only": false, "value": "2016-02-16T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2016_0175", "record": "RHSA-2016_0175", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T00:00:00Z", "date_only": false, "value": "2016-02-16T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2016_0176", "record": "RHSA-2016_0176", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T00:00:00Z", "date_only": false, "value": "2016-02-16T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2016_0225", "record": "RHSA-2016_0225", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T00:00:00Z", "date_only": false, "value": "2016-02-16T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2016_0277", "record": "RHSA-2016_0277", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T14:00:00Z", "date_only": false, "value": "2016-02-16T14:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2015-7547", "record": "UBUNTU-CVE-2015-7547", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T15:19:38Z", "date_only": false, "value": "2016-02-16T15:19:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2016:0175", "record": "RHSA-2016:0175", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-02-16T15:19:38Z", "date_only": false, "value": "2016-02-16T15:19:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2016_0175", "record": "RHSA-2016_0175", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-02-16T15:19:38Z", "date_only": false, "value": "2016-02-16T15:19:38+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2016:0175", "record": "RHSA-2016:0175", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T15:19:38Z", "date_only": false, "value": "2016-02-16T15:19:38+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2016_0175", "record": "RHSA-2016_0175", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T15:19:38Z", "date_only": false, "value": "2016-02-16T15:19:38+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2016:0175", "record": "RHSA-2016:0175", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T15:19:38Z", "date_only": false, "value": "2016-02-16T15:19:38+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2016_0175", "record": "RHSA-2016_0175", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T15:19:53Z", "date_only": false, "value": "2016-02-16T15:19:53Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2016:0471-1", "record": "SUSE-SU-2016:0471-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-02-16T15:19:53Z", "date_only": false, "value": "2016-02-16T15:19:53Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2016:0471-1", "record": "SUSE-SU-2016:0471-1", "field": "document.tracking.generator.date"}, {"timestamp": "2016-02-16T15:19:53Z", "date_only": false, "value": "2016-02-16T15:19:53Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2016:0471-1", "record": "SUSE-SU-2016:0471-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2016-02-16T15:19:53Z", "date_only": false, "value": "2016-02-16T15:19:53Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2016:0471-1", "record": "SUSE-SU-2016:0471-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T15:20:20Z", "date_only": false, "value": "2016-02-16T15:20:20Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2016:0473-1", "record": "SUSE-SU-2016:0473-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-02-16T15:20:20Z", "date_only": false, "value": "2016-02-16T15:20:20Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2016:0473-1", "record": "SUSE-SU-2016:0473-1", "field": "document.tracking.generator.date"}, {"timestamp": "2016-02-16T15:20:20Z", "date_only": false, "value": "2016-02-16T15:20:20Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2016:0473-1", "record": "SUSE-SU-2016:0473-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2016-02-16T15:20:20Z", "date_only": false, "value": "2016-02-16T15:20:20Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2016:0473-1", "record": "SUSE-SU-2016:0473-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T15:37:56Z", "date_only": false, "value": "2016-02-16T15:37:56Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2016:0470-1", "record": "SUSE-SU-2016:0470-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-02-16T15:37:56Z", "date_only": false, "value": "2016-02-16T15:37:56Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2016:0470-1", "record": "SUSE-SU-2016:0470-1", "field": "document.tracking.generator.date"}, {"timestamp": "2016-02-16T15:37:56Z", "date_only": false, "value": "2016-02-16T15:37:56Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2016:0470-1", "record": "SUSE-SU-2016:0470-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2016-02-16T15:37:56Z", "date_only": false, "value": "2016-02-16T15:37:56Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2016:0470-1", "record": "SUSE-SU-2016:0470-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T15:38:08Z", "date_only": false, "value": "2016-02-16T15:38:08+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2016:0225", "record": "RHSA-2016:0225", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-02-16T15:38:08Z", "date_only": false, "value": "2016-02-16T15:38:08+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2016_0225", "record": "RHSA-2016_0225", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-02-16T15:38:08Z", "date_only": false, "value": "2016-02-16T15:38:08+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2016:0225", "record": "RHSA-2016:0225", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T15:38:08Z", "date_only": false, "value": "2016-02-16T15:38:08+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2016_0225", "record": "RHSA-2016_0225", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T15:38:08Z", "date_only": false, "value": "2016-02-16T15:38:08+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2016:0225", "record": "RHSA-2016:0225", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T15:38:08Z", "date_only": false, "value": "2016-02-16T15:38:08+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2016_0225", "record": "RHSA-2016_0225", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T15:39:10Z", "date_only": false, "value": "2016-02-16T15:39:10+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2016_0176", "record": "RHSA-2016_0176", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-02-16T15:39:10Z", "date_only": false, "value": "2016-02-16T15:39:10+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2016_0176", "record": "RHSA-2016_0176", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T15:39:10Z", "date_only": false, "value": "2016-02-16T15:39:10+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2016_0176", "record": "RHSA-2016_0176", "field": "vulnerabilities.1.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T15:39:44Z", "date_only": false, "value": "2016-02-16T15:39:44Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2016:0472-1", "record": "SUSE-SU-2016:0472-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-02-16T15:39:44Z", "date_only": false, "value": "2016-02-16T15:39:44Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2016:0472-1", "record": "SUSE-SU-2016:0472-1", "field": "document.tracking.generator.date"}, {"timestamp": "2016-02-16T15:39:44Z", "date_only": false, "value": "2016-02-16T15:39:44Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2016:0472-1", "record": "SUSE-SU-2016:0472-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2016-02-16T15:39:44Z", "date_only": false, "value": "2016-02-16T15:39:44Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2016:0472-1", "record": "SUSE-SU-2016:0472-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T17:17:25Z", "date_only": false, "value": "2016-02-16T17:17:25", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201602-0004", "record": "VAR-201602-0004", "field": "sources_release_date.data.3.date"}, {"timestamp": "2016-02-16T19:13:56Z", "date_only": false, "value": "2016-02-16T19:13:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsecalert/12", "record": "CVE-2015-7547", "field": "creation_timestamp", "uuid": "b5024f66-c289-4424-9e28-86003b747c51", "content": "\u26a0\ufe0f CVE-2015-7547: glibc getaddrinfo stack-based buffer overflow vulnerability - potentially all linux OS affected. (severity: \ud83d\udd38high) Further Information: http://yt.gl/20157547\n#alert #vulnerability #severityhigh #linux #glibc\nThanks to the anonymous user reporting it via https://infected.io/telegram-submission", "url": "https://t.me/itsecalert/12"}, {"timestamp": "2016-02-16T23:00:00Z", "date_only": false, "value": "2016-02-16T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-02-16T23:00:00Z", "date_only": false, "value": "2016-02-16T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-16T23:00:00Z", "date_only": false, "value": "2016-02-16T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-17T00:00:00Z", "date_only": false, "value": "2016-02-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2016-AVI-066", "record": "CERTFR-2016-AVI-066", "field": "revisions.0.revision_date"}, {"timestamp": "2016-02-17T00:00:00Z", "date_only": true, "value": "2016-02-17", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2016-01100", "record": "CNVD-2016-01100", "field": "submitTime"}, {"timestamp": "2016-02-17T01:01:26Z", "date_only": false, "value": "2016-02-17T01:01:26", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201602-0004", "record": "VAR-201602-0004", "field": "sources_release_date.data.7.date"}, {"timestamp": "2016-02-17T16:38:28Z", "date_only": false, "value": "2016-02-17T16:38:28Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-RU-2016:0496-1", "record": "SUSE-RU-2016:0496-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-02-17T16:38:28Z", "date_only": false, "value": "2016-02-17T16:38:28Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-RU-2016:0496-1", "record": "SUSE-RU-2016:0496-1", "field": "document.tracking.generator.date"}, {"timestamp": "2016-02-17T16:38:28Z", "date_only": false, "value": "2016-02-17T16:38:28Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-RU-2016:0496-1", "record": "SUSE-RU-2016:0496-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2016-02-17T16:38:28Z", "date_only": false, "value": "2016-02-17T16:38:28Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-RU-2016:0496-1", "record": "SUSE-RU-2016:0496-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-17T23:53:39Z", "date_only": false, "value": "2016-02-17T23:53:39", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201602-0004", "record": "VAR-201602-0004", "field": "sources_release_date.data.11.date"}, {"timestamp": "2016-02-18T00:00:00Z", "date_only": false, "value": "2016-02-18T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201602-0004", "record": "VAR-201602-0004", "field": "sources_release_date.data.0.date"}, {"timestamp": "2016-02-18T00:00:00Z", "date_only": true, "value": "2016-02-18", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2016-01100", "record": "CNVD-2016-01100", "field": "openTime"}, {"timestamp": "2016-02-18T21:00:00Z", "date_only": false, "value": "2016-02-18T21:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2015-7547", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-18T21:59:00Z", "date_only": false, "value": "2016-02-18T21:59:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5XR7-H7CP-W9PC", "record": "GHSA-5XR7-H7CP-W9PC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2016-02-18T21:59:00Z", "date_only": false, "value": "2016-02-18T21:59Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2015-7547", "record": "GSD-2015-7547", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2016-02-18T21:59:00.120Z", "date_only": false, "value": "2016-02-18T21:59:00.120000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201602-0004", "record": "VAR-201602-0004", "field": "sources_release_date.data.12.date"}, {"timestamp": "2016-02-18T21:59:00.120Z", "date_only": false, "value": "2016-02-18T21:59:00.120", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2015-7547", "record": "FKIE_CVE-2015-7547", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-18T23:00:00Z", "date_only": false, "value": "2016-02-18T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2016-02-19T22:19:14Z", "date_only": false, "value": "2016-02-19T22:19:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2016:0277", "record": "RHSA-2016:0277", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-02-19T22:19:14Z", "date_only": false, "value": "2016-02-19T22:19:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2016_0277", "record": "RHSA-2016_0277", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-02-19T22:19:14Z", "date_only": false, "value": "2016-02-19T22:19:14+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2016:0277", "record": "RHSA-2016:0277", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-19T22:19:14Z", "date_only": false, "value": "2016-02-19T22:19:14+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2016_0277", "record": "RHSA-2016_0277", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-19T22:19:14Z", "date_only": false, "value": "2016-02-19T22:19:14+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2016:0277", "record": "RHSA-2016:0277", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-19T22:19:14Z", "date_only": false, "value": "2016-02-19T22:19:14+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2016_0277", "record": "RHSA-2016_0277", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2016-02-19T22:33:00Z", "date_only": false, "value": "2016-02-19T22:33:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201602-0004", "record": "VAR-201602-0004", "field": "sources_release_date.data.8.date"}, {"timestamp": "2016-02-21T23:00:00Z", "date_only": false, "value": "2016-02-21T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2016-02-22T23:00:00Z", "date_only": false, "value": "2016-02-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2016-02-25T00:00:00Z", "date_only": false, "value": "2016-02-25T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2016-AVI-071", "record": "CERTFR-2016-AVI-071", "field": "revisions.0.revision_date"}, {"timestamp": "2016-02-25T23:00:00Z", "date_only": false, "value": "2016-02-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2016-03-03T00:54:17Z", "date_only": false, "value": "2016-03-03T00:54:17", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201602-0004", "record": "VAR-201602-0004", "field": "sources_release_date.data.10.date"}, {"timestamp": "2016-03-03T23:00:00Z", "date_only": false, "value": "2016-03-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "document.tracking.revision_history.11.date"}, {"timestamp": "2016-03-14T13:31:02Z", "date_only": false, "value": "2016-03-14T13:31:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2016:0748-1", "record": "SUSE-SU-2016:0748-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-03-14T13:31:02Z", "date_only": false, "value": "2016-03-14T13:31:02Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2016:0748-1", "record": "SUSE-SU-2016:0748-1", "field": "document.tracking.generator.date"}, {"timestamp": "2016-03-14T13:31:02Z", "date_only": false, "value": "2016-03-14T13:31:02Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2016:0748-1", "record": "SUSE-SU-2016:0748-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2016-03-14T13:31:02Z", "date_only": false, "value": "2016-03-14T13:31:02Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2016:0748-1", "record": "SUSE-SU-2016:0748-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-03-14T23:00:00Z", "date_only": false, "value": "2016-03-14T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "document.tracking.revision_history.13.date"}, {"timestamp": "2016-03-15T17:01:49Z", "date_only": false, "value": "2016-03-15T17:01:49Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2016:0778-1", "record": "SUSE-SU-2016:0778-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-03-15T17:01:49Z", "date_only": false, "value": "2016-03-15T17:01:49Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2016:0778-1", "record": "SUSE-SU-2016:0778-1", "field": "document.tracking.generator.date"}, {"timestamp": "2016-03-15T17:01:49Z", "date_only": false, "value": "2016-03-15T17:01:49Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2016:0778-1", "record": "SUSE-SU-2016:0778-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2016-03-15T17:01:49Z", "date_only": false, "value": "2016-03-15T17:01:49Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2016:0778-1", "record": "SUSE-SU-2016:0778-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-03-15T23:00:00Z", "date_only": false, "value": "2016-03-15T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "document.tracking.revision_history.14.date"}, {"timestamp": "2016-03-16T10:28:25Z", "date_only": false, "value": "2016-03-16T10:28:25Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2016:0786-1", "record": "SUSE-SU-2016:0786-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2016-03-16T10:28:25Z", "date_only": false, "value": "2016-03-16T10:28:25Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2016:0786-1", "record": "SUSE-SU-2016:0786-1", "field": "document.tracking.generator.date"}, {"timestamp": "2016-03-16T10:28:25Z", "date_only": false, "value": "2016-03-16T10:28:25Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2016:0786-1", "record": "SUSE-SU-2016:0786-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2016-03-16T10:28:25Z", "date_only": false, "value": "2016-03-16T10:28:25Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2016:0786-1", "record": "SUSE-SU-2016:0786-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2016-04-20T00:00:00Z", "date_only": false, "value": "2016-04-20T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2016-AVI-136", "record": "CERTFR-2016-AVI-136", "field": "revisions.0.revision_date"}, {"timestamp": "2016-04-28T22:00:00Z", "date_only": false, "value": "2016-04-28T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "document.tracking.revision_history.16.date"}, {"timestamp": "2016-05-13T16:14:06Z", "date_only": false, "value": "2016-05-13T16:14:06", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201602-0004", "record": "VAR-201602-0004", "field": "sources_release_date.data.9.date"}, {"timestamp": "2016-05-18T23:31:21Z", "date_only": false, "value": "2016-05-18T23:31:21", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201602-0004", "record": "VAR-201602-0004", "field": "sources_release_date.data.6.date"}, {"timestamp": "2016-06-16T15:13:17Z", "date_only": false, "value": "2016-06-16T15:13:17", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201602-0004", "record": "VAR-201602-0004", "field": "sources_release_date.data.4.date"}, {"timestamp": "2016-07-03T22:00:00Z", "date_only": false, "value": "2016-07-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "document.tracking.revision_history.19.date"}, {"timestamp": "2016-07-12T00:00:00Z", "date_only": false, "value": "2016-07-12T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201602-0004", "record": "VAR-201602-0004", "field": "sources_update_date.data.0.date"}, {"timestamp": "2016-07-27T14:25:21Z", "date_only": false, "value": "2016-07-27T14:25:21", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201602-0004", "record": "VAR-201602-0004", "field": "sources_release_date.data.5.date"}, {"timestamp": "2016-11-09T23:00:00Z", "date_only": false, "value": "2016-11-09T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "document.tracking.revision_history.21.date"}, {"timestamp": "2017-01-18T00:00:00Z", "date_only": false, "value": "2017-01-18T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2017-AVI-022", "record": "CERTFR-2017-AVI-022", "field": "revisions.0.revision_date"}, {"timestamp": "2017-07-25T00:00:00Z", "date_only": false, "value": "2017-07-25T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201602-0004", "record": "VAR-201602-0004", "field": "sources_update_date.data.2.date"}, {"timestamp": "2020-07-08T22:00:00Z", "date_only": false, "value": "2020-07-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "document.tracking.revision_history.22.date"}, {"timestamp": "2020-07-09T00:00:00Z", "date_only": false, "value": "2020-07-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-420", "record": "CERTFR-2020-AVI-420", "field": "revisions.0.revision_date"}, {"timestamp": "2020-08-11T22:00:00Z", "date_only": false, "value": "2020-08-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "document.tracking.revision_history.23.date"}, {"timestamp": "2021-09-01T00:00:00Z", "date_only": false, "value": "2021-09-01T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-669", "record": "CERTFR-2021-AVI-669", "field": "revisions.0.revision_date"}, {"timestamp": "2022-05-13T01:04:15Z", "date_only": false, "value": "2022-05-13T01:04:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5XR7-H7CP-W9PC", "record": "GHSA-5XR7-H7CP-W9PC", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-06-20T18:06:34Z", "date_only": false, "value": "2022-06-20T18:06:34.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "CVE-2015-7547", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-02-12T00:00:00Z", "date_only": false, "value": "2023-02-12T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201602-0004", "record": "VAR-201602-0004", "field": "sources_update_date.data.1.date"}, {"timestamp": "2023-02-12T23:15:00Z", "date_only": false, "value": "2023-02-12T23:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2015-7547", "record": "GSD-2015-7547", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-02-12T23:15:36.457Z", "date_only": false, "value": "2023-02-12T23:15:36.457000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201602-0004", "record": "VAR-201602-0004", "field": "sources_update_date.data.3.date"}, {"timestamp": "2023-04-16T22:00:00Z", "date_only": false, "value": "2023-04-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "document.tracking.revision_history.24.date"}, {"timestamp": "2023-04-16T22:00:00Z", "date_only": false, "value": "2023-04-16T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-12-13T01:20:01.245Z", "date_only": false, "value": "2023-12-13T01:20:01.245611Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2015-7547", "record": "GSD-2015-7547", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10154-1", "record": "OPENSUSE-SU-2024:10154-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10154-1", "record": "OPENSUSE-SU-2024:10154-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10154-1", "record": "OPENSUSE-SU-2024:10154-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10154-1", "record": "OPENSUSE-SU-2024:10154-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-07-23T20:01:54.898Z", "date_only": false, "value": "2024-07-23T20:01:54.898000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-201602-0004", "record": "VAR-201602-0004", "field": "last_update_date"}, {"timestamp": "2024-08-06T07:51:28.440Z", "date_only": false, "value": "2024-08-06T07:51:28.440Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2015-7547", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-06T07:51:28.440Z", "date_only": false, "value": "2024-08-06T07:51:28.440Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2015-7547", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:48:54.869Z", "date_only": false, "value": "2024-08-15T17:48:54.869+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0973", "record": "WID-SEC-W-2023-0973", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-14T15:35:25Z", "date_only": false, "value": "2024-11-14T15:35:25+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2016_0175", "record": "RHSA-2016_0175", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-11-14T15:35:25Z", "date_only": false, "value": "2024-11-14T15:35:25+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2016_0175", "record": "RHSA-2016_0175", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-14T15:35:25Z", "date_only": false, "value": "2024-11-14T15:35:25+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2016_0175", "record": "RHSA-2016_0175", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-14T15:35:33Z", "date_only": false, "value": "2024-11-14T15:35:33+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2016_0225", "record": "RHSA-2016_0225", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-11-14T15:35:33Z", "date_only": false, "value": "2024-11-14T15:35:33+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2016_0225", "record": "RHSA-2016_0225", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-14T15:35:33Z", "date_only": false, "value": "2024-11-14T15:35:33+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2016_0225", "record": "RHSA-2016_0225", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-14T15:36:19Z", "date_only": false, "value": "2024-11-14T15:36:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2016_0277", "record": "RHSA-2016_0277", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-11-14T15:36:19Z", "date_only": false, "value": "2024-11-14T15:36:19+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2016_0277", "record": "RHSA-2016_0277", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-14T15:36:19Z", "date_only": false, "value": "2024-11-14T15:36:19+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2016_0277", "record": "RHSA-2016_0277", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-22T09:22:16Z", "date_only": false, "value": "2024-11-22T09:22:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2016_0176", "record": "RHSA-2016_0176", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-11-22T09:22:16Z", "date_only": false, "value": "2024-11-22T09:22:16+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2016_0176", "record": "RHSA-2016_0176", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-22T09:22:16Z", "date_only": false, "value": "2024-11-22T09:22:16+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2016_0176", "record": "RHSA-2016_0176", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-01-19T13:52:15.010Z", "date_only": false, "value": "2025-01-19T13:52:15.010593Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/daffyduke.bsky.social/post/3lg3xtsaqpz2e", "record": "CVE-2015-7547", "field": "creation_timestamp", "uuid": "cc83e973-2e8e-43c0-9354-a65e2fb8358e", "url": "https://bsky.app/profile/daffyduke.bsky.social/post/3lg3xtsaqpz2e"}, {"timestamp": "2025-04-12T12:57:08Z", "date_only": false, "value": "2025-04-12T12:57:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5XR7-H7CP-W9PC", "record": "GHSA-5XR7-H7CP-W9PC", "field": "modified"}, {"timestamp": "2025-06-05T21:39:25.168Z", "date_only": false, "value": "2025-06-05T21:39:25.168938Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-16-103-01C", "record": "ICSA-16-103-01C", "field": "document.tracking.generator.date"}, {"timestamp": "2025-06-05T21:39:25.169Z", "date_only": false, "value": "2025-06-05T21:39:25.169040Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-16-103-01C", "record": "ICSA-16-103-01C", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-06-05T21:39:25.169Z", "date_only": false, "value": "2025-06-05T21:39:25.169040Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-16-103-01C", "record": "ICSA-16-103-01C", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-09-11T11:55:23Z", "date_only": false, "value": "2025-09-11T11:55:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/tamer1an/d3cf5cdbec1b41112d4ed8bd8bdebcf8", "record": "cve-2015-7547", "field": "creation_timestamp", "uuid": "6f235c46-ec5b-40ed-97dc-c7ae88c34284", "url": "https://gist.github.com/tamer1an/d3cf5cdbec1b41112d4ed8bd8bdebcf8"}, {"timestamp": "2026-04-22T07:37:50Z", "date_only": false, "value": "2026-04-22T07:37:50Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2015-7547", "record": "UBUNTU-CVE-2015-7547", "field": "modified"}, {"timestamp": "2026-06-17T00:32:43.407Z", "date_only": false, "value": "2026-06-17T00:32:43.407", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2015-7547", "record": "FKIE_CVE-2015-7547", "field": "lastModified"}, {"timestamp": "2026-06-28T12:10:22Z", "date_only": false, "value": "2026-06-28T12:10:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2016:0225", "record": "RHSA-2016:0225", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-28T12:10:22Z", "date_only": false, "value": "2026-06-28T12:10:22+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2016:0225", "record": "RHSA-2016:0225", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-28T12:10:22Z", "date_only": false, "value": "2026-06-28T12:10:22+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2016:0225", "record": "RHSA-2016:0225", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-28T12:13:00Z", "date_only": false, "value": "2026-06-28T12:13:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2016:0277", "record": "RHSA-2016:0277", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-28T12:13:00Z", "date_only": false, "value": "2026-06-28T12:13:00+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2016:0277", "record": "RHSA-2016:0277", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-28T12:13:00Z", "date_only": false, "value": "2026-06-28T12:13:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2016:0277", "record": "RHSA-2016:0277", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-28T12:26:49Z", "date_only": false, "value": "2026-06-28T12:26:49+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2016:0175", "record": "RHSA-2016:0175", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-28T12:26:49Z", "date_only": false, "value": "2026-06-28T12:26:49+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2016:0175", "record": "RHSA-2016:0175", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-28T12:26:49Z", "date_only": false, "value": "2026-06-28T12:26:49+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2016:0175", "record": "RHSA-2016:0175", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-22T14:00:21.301Z", "date_only": false, "value": "2026-08-22T14:00:21.301516Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/informationsec/693", "record": "CVE-2015-7547", "field": "creation_timestamp", "uuid": "ccf7a313-1e3d-433a-86e6-ff5843ae4577", "content": "\u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062a\u06a9\u0645\u06cc\u0644\u06cc \u062f\u0631 \u062e\u0635\u0648\u0635 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Glibc \u0648 \u0631\u0648\u0634\u0647\u0627\u06cc Mitigation \u0622\u0646\n\nhttps://sourceware.org/bugzilla/show_bug.cgi?id=18665\n\n- Mitigating factors for UDP include:\n\u00a0 - A firewall that drops UDP DNS packets > 512 bytes.\n\u00a0 - A local resolver (that drops non-compliant responses).\n\u00a0 - Avoid dual A and AAAA queries (avoids buffer management error) e.g.\n\u00a0 \u00a0 Do not use AF_UNSPEC.\n\u00a0 - No use of options edns0 in /etc/resolv.conf since EDNS0 allows\n\u00a0 \u00a0 responses larger than 512 bytes and can lead to valid DNS responses\n\u00a0 \u00a0 that overflow.\n\u00a0 - No use of RES_USE_EDNS0 or RES_USE_DNSSEC since they can both\n\u00a0 \u00a0 lead to valid large EDNS0-based DNS responses that can overflow.\n\n- Mitigating factors for TCP include:\n\u00a0 - Limit all replies to 1024 bytes.\n\n- Mitigations that don't work:\n\u00a0 - Setting options single-request does not change buffer management\n\u00a0 \u00a0 and does not prevent the exploit.\n\u00a0 - Setting options single-request-reopen does not change buffer\n\u00a0 \u00a0 management and does not prevent the exploit.\n\u00a0 - Disabling IPv6 does not disable AAAA queries. The use of AF_UNSPEC\n\u00a0 \u00a0 unconditionally enables the dual query.\n\u00a0 \u00a0 - The use of sysctl -w net.ipv6.conf.all.disable_ipv6=1 will not\n\u00a0 \u00a0 \u00a0 protect your system from the exploit.\n\u00a0 - Blocking IPv6 at a local or intermediate resolver does not work to\n\u00a0 \u00a0 prevent the exploit. The exploit payload can be delivered in A or\n\u00a0 \u00a0 AAAA results, it is the parallel query that triggers the buffer\n\u00a0 \u00a0 management flaw.\n\n\u2796\u2796\u2796\u2796\n@informationsec\n\n\u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc Bind \u0628\u0631\u0627\u06cc truncation bit set(BIND 9 CONFIGURATION REFERENCE)\n\nnamed.conf \ud83d\udc49 options \ud83d\udc49rate-limit \ud83d\udc49 [ slip number ; ]\n\u2796\u2796\u2796\u2796\nDnsmasq\nhttp://www.thekelleys.org.uk/dnsmasq/doc.html\nhttps://wiki.debian.org/HowTo/dnsmasq\n\u2796\u2796\u2796\u2796\nASLR technique\nhttps://en.wikipedia.org/wiki/Address_space_layout_randomization\n\u2796\u2796\u2796\u2796\n@informationsec\n\nRule \u0647\u0627\u06cc \u067e\u06cc\u0634\u0646\u0647\u0627\u062f\u06cc  Mitigate \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062a\u0648\u0633\u0637 snort\nCVE-2015-7547 (GlibC bug) snort rules\nhttp://seclists.org/snort/2016/q1/285\n\u2796\u2796\u2796\u2796\n@informationsec\n\u0648\u0636\u0639\u06cc\u062a \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0648 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0648 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 Cisco\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160218-glibc\n\u2796\u2796\u2796\u2796\n\u0631\u0627\u0647\u06a9\u0627\u0631 \u067e\u06cc\u0634\u0646\u0647\u0627\u062f\u06cc \u0628\u0631\u0627\u06cc Mitigate \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a Cisco\nCVE-2015-7547, glibc vulnerability; its impact on Cisco products and our mitigation solutions\n\nhttp://info.stack8.com/blog/cve20157547-google-glibc-vulnerability-cisco-products\n\u2796\u2796\u2796\u2796\n\u0648\u0636\u0639\u06cc\u062a \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 Debian\nhttps://security-tracker.debian.org/tracker/CVE-2015-7547\n\u2796\u2796\u2796\u2796\nCVE-2015-7547-poc\nhttps://github.com/fjserna/CVE-2015-7547\n\n@informationsec", "url": "https://t.me/informationsec/693"}, {"timestamp": "2026-08-22T14:00:22.244Z", "date_only": false, "value": "2026-08-22T14:00:22.244321Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/informationsec/692", "record": "CVE-2015-7547", "field": "creation_timestamp", "uuid": "b21133f8-99df-4e12-8581-835f66ae9796", "content": "\u0645\u0631\u0648\u0631\u06cc \u0628\u0631 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u062e\u06cc\u0631 Glibc\n\n\u0627\u062d\u062a\u0645\u0627\u0644\u0627 \u0647\u0645\u0647 \u062f\u0648\u0633\u062a\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u062e\u06cc\u0631\u06cc \u06a9\u0647 \u062f\u0631 Glibc \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0622\u06af\u0627\u0647\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0646\u062f.  \u0628\u062d\u062b \u0647\u0627\u06cc \u0632\u06cc\u0627\u062f\u06cc \u062f\u0631 \u0627\u06cc\u0646 \u062e\u0635\u0648\u0635 \u062a\u0627 \u06a9\u0646\u0648\u0646 \u062f\u0631 \u0628\u06cc\u0646 \u0645\u062a\u062e\u0635\u0635\u06cc\u0646 \u0645\u0637\u0631\u062d \u0634\u062f\u0647 \u0648 \u0645\u0627 \u0631\u0627 \u0628\u0631 \u0622\u0646 \u062f\u0627\u0634\u062a \u06a9\u0647 \u0628\u0631\u0631\u0633\u06cc \u062f\u0642\u06cc\u0642 \u0648 \u062c\u0627\u0645\u0639 \u062a\u0631\u06cc \u062f\u0631 \u0627\u06cc\u0646 \u062e\u0635\u0648\u0635 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u06cc\u0645.\n@informationsec\n\u062d\u062f\u0648\u062f \u06cc\u06a9 \u0633\u0627\u0644 \u067e\u06cc\u0634 \u0628\u0648\u062f \u06a9\u0647  glibc\u060c \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647 GNU C \u060c \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc GHOST  \u0631\u0627 \u062a\u062c\u0631\u0628\u0647 \u06a9\u0631\u062f \u0648 \u0628\u0627\u0632 \u0647\u0645 \u0627\u0645\u0633\u0627\u0644 \u062f\u0631 \u0645\u0639\u0631\u0636 \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u0647\u0645 \u062f\u06cc\u06af\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062a\u0642\u0631\u06cc\u0628\u0627 \u0628\u0631 \u062a\u0645\u0627\u0645 \u0645\u0627\u0634\u06cc\u0646 \u0647\u0627\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 Linux\u060c API web services  \u0648 web frameworks  \u0647\u0627\u06cc \u0628\u0632\u0631\u06af\u06cc \u06a9\u0647 \u062f\u0631 \u0622\u0646 \u0627\u06cc\u0646 \u06a9\u062f \u0627\u062c\u0631\u0627 \u0645\u06cc \u0634\u0648\u062f\u060c \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc \u06af\u0630\u0627\u0631\u062f.\n\n\u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647 Glibc \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647 C \u06cc\u06cc \u0627\u0633\u062a \u06a9\u0647 systems call \u0647\u0627 \u0648 \u0633\u0627\u06cc\u0631 \u062a\u0648\u0627\u0628\u0639 \u067e\u0627\u06cc\u0647 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc Linux \u06cc\u06cc \u0634\u0627\u0645\u0644 GNU OS \u0648GNU Linux \u0631\u0627 \u062a\u0639\u0631\u06cc\u0641 \u0645\u06cc \u06a9\u0646\u062f.\n@informationsec\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0645\u0633\u062a\u0642\u0644 \u062a\u0648\u0633\u0637 \u0645\u062d\u0642\u0642\u0627\u0646 \u062f\u0631 Google \u0648 Red Hat \u06a9\u0634\u0641 \u0634\u062f\u060c Patch \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0646\u0642\u0635\u060c CVE-2015-7547\u060c \u06cc\u06a9 \u0633\u0631\u0631\u06cc\u0632 \u0628\u0627\u0641\u0631 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u067e\u0634\u062a\u0647(stack-based buffer overflow) \u062f\u0631 glibc DNS client-side resolver  \u0627\u0633\u062a \u06a9\u0647 \u0645\u0627\u0634\u06cc\u0646 \u0647\u0627\u06cc Linux \u0631\u0627 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc \u062f\u0647\u062f.\n\u0645\u062a\u062e\u0635\u0635\u06cc\u0646 Google \u062f\u0631 \u0631\u0627\u0647\u0646\u0645\u0627\u06cc\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062e\u0648\u062f \u06af\u0641\u062a\u0647 \u0627\u0646\u062f \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u0632 \u062a\u0627\u0628\u0639 getaddrinfo () \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u0646\u062f \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u062a\u0648\u0633\u0637 domain name\u0647\u0627 \u0648 \u06cc\u0627 DNS servers  \u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0645\u0647\u0627\u062c\u0645 \u0622\u0646\u0647\u0627 \u0631\u0627 \u06a9\u0646\u062a\u0631\u0644 \u0645\u06cc \u06a9\u0646\u0646\u062f \u0648 \u06cc\u0627 \u062d\u0645\u0644\u0647 man-in-the-middle\u060c exploit \u0634\u0648\u0646\u062f.\n@informationsec\n\u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u062f\u0631 \u062a\u0645\u0627\u0645 \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc glibc \u0627\u0632 2.9 \u0628\u0647 \u0628\u0627\u0644\u0627 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u0648 \u0628\u0627\u06cc\u0633\u062a\u06cc \u062f\u0631 \u0627\u0633\u0631\u0639 \u0648\u0642\u062a \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06af\u0631\u062f\u062f.\n\n\u062f\u0631\u0635\u0648\u0631\u062a\u06cc \u06a9\u0647 \u0646\u062a\u0648\u0627\u0646 \u062f\u0631 \u0627\u0633\u0631\u0639 \u0648\u0642\u062a \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0631\u0627 patch \u0646\u0645\u0648\u062f \u0645\u06cc \u062a\u0648\u0627\u0646 \u0627\u0632 \u0631\u0627\u0647\u06a9\u0627\u0631 \u0632\u06cc\u0631 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u0631\u0648\u0634 \u0645\u0648\u0642\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f.\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u062a\u06a9\u06cc \u0628\u0631 \u067e\u0627\u0633\u062e UDP \u06cc\u0627 TCP \u0628\u0632\u0631\u06af (\u0628\u06cc\u0634 \u062a\u0631 \u0627\u0632 2048 \u0628\u0627\u06cc\u062a) \u0627\u0633\u062a \u06a9\u0647 \u067e\u0627\u0633\u062e \u062f\u06cc\u06af\u0631\u06cc \u0631\u0627 \u0628\u0647 \u062f\u0646\u0628\u0627\u0644 \u062e\u0648\u0627\u0647\u062f \u062f\u0627\u0634\u062a \u0648 \u067e\u0634\u062a\u0647 \u0631\u0627 overwrite \u0645\u06cc \u06a9\u0646\u062f. \n\n\u067e\u06cc\u0634\u0646\u0647\u0627\u062f \u0645\u062a\u062e\u0635\u0635\u06cc\u0646 Google\u060c \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0633\u0627\u06cc\u0632 \u067e\u0627\u0633\u062e\u06cc \u06a9\u0647 \u062a\u0648\u0633\u0637 DNS resolver \u067e\u0630\u06cc\u0631\u0641\u062a\u0647 \u0645\u06cc \u0634\u0648\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 DNSMasq \u06cc\u0627 \u0628\u0631\u0646\u0627\u0645\u0647 \u0647\u0627\u06cc \u0645\u0634\u0627\u0628\u0647 \u060c \u0627\u0633\u062a. \n\u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u0637\u0645\u06cc\u0646\u0627\u0646 \u062d\u0627\u0635\u0644 \u06af\u0631\u062f\u062f \u06a9\u0647 DNS query \u0647\u0627 \u0641\u0642\u0637 \u0628\u0647 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc DNS  \u06cc\u06cc \u06a9\u0647  \u0627\u0646\u062f\u0627\u0632\u0647 \u067e\u0627\u0633\u062e UDP  \u0622\u0646\u0647\u0627 \u0628\u0627 truncation bit set \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0627\u0644\u0628\u062a\u0647 \u062f\u0631 \u0645\u0648\u0631\u062f \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0633\u0627\u06cc\u0632 \u0628\u0627\u06cc\u062f \u062f\u0642\u062a \u0628\u06cc\u0634\u062a\u0631\u06cc \u0628\u0647 \u062e\u0631\u062c \u062f\u0627\u062f. \u062f\u0644\u06cc\u0644 \u0627\u06cc\u0646 \u0627\u0645\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627 \u0627\u0632 \u0627\u0645\u06a9\u0627\u0646\u0627\u062a \u067e\u06cc\u0634\u0631\u0641\u062a\u0647 \u0627\u06cc \u0645\u062b\u0644 DNSSEC \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 EDNS0  \u0646\u06cc\u0627\u0632 \u062f\u0627\u0631\u062f \u0648 \u0627\u06cc\u0646 \u0648\u06cc\u0698\u06af\u06cc \u0647\u0645 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631 \u06a9\u0631\u062f \u0635\u062d\u06cc\u062d \u0646\u06cc\u0627\u0632\u0645\u0646\u062f \u067e\u0630\u06cc\u0631\u0634 \u067e\u0627\u0633\u062e \u0647\u0627\u06cc \u0628\u0627\u0644\u0627\u062a\u0631 \u0627\u0632 512 byte  \u062a\u0648\u0633\u0637 \u0633\u0631\u0648\u0631 \u0627\u0633\u062a.\n@informationsec\n\u06af\u0632\u0627\u0631\u0634 Google \u0627\u0634\u0627\u0631\u0647 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 exploitation vector \u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0628\u0631\u0627\u06cc \u062d\u0645\u0644\u0647 \u0628\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u062f\u060c ssh\u060c sudo \u0648 curl \u0648 \u0633\u0627\u06cc\u0631 \u0645\u0648\u0627\u0631\u062f \u0627\u0633\u062a.\n\u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u0634\u0627\u0631\u0647 \u0634\u062f\u0647 \u06a9\u0647 Remote code execution \u0627\u0645\u06a9\u0627\u0646 \u067e\u0630\u06cc\u0631 \u0627\u0633\u062a \u0627\u0645\u0627 \u0633\u0631\u0631\u0627\u0633\u062a(straightforward)  \u0646\u06cc\u0633\u062a. \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u06a9\u0627\u0631 \u0646\u06cc\u0627\u0632 \u0627\u0633\u062a \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0648\u062c\u0648\u062f \u0628\u0631 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627 \u0645\u062b\u0644 ASLR(Address space layout randomization) \u0631\u0627 \u0628\u062a\u0648\u0627\u0646 bypass \u0646\u0645\u0648\u062f.\n\n\u0646\u06af\u0631\u0627\u0646\u06cc \u062f\u0631 \u062e\u0635\u0648\u0635 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u062f\u0644\u06cc\u0644 \u062a\u0639\u062f\u0627\u062f \u0632\u06cc\u0627\u062f \u0633\u06cc\u0633\u062a\u0645\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0627\u0633\u062a \u06a9\u0647 \u062a\u0645\u0627\u0645 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0645\u0628\u062a\u0646\u06cc \u0628\u0631Linux  \u0648 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0628\u0647 \u0646\u0648\u0639\u06cc \u0627\u0632 Glibc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u0646\u062f \u0631\u0627 \u0634\u0627\u0645\u0644 \u0645\u06cc \u0634\u0648\u062f.\n@informationsec\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc_Glibc_2.9 #\u062e\u0628\u0631\n\n\u0645\u0646\u0628\u0639\nhttps://googleonlinesecurity.blogspot.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html\nhttps://sourceware.org/ml/libc-alpha/2016-02/msg00416.html\nhttp://www.infoworld.com/article/3033862/security/patch-now-unix-bug-puts-linux-android-and-ios-systems-at-risk.html\nhttps://isc.sans.edu/forums/diary/CVE20157547+Critical+Vulnerability+in+glibc+getaddrinfo/20737\nhttp://www.darknet.org.uk/2016/02/the-linux-glibc-exploit-what-you-need-to-know/", "url": "https://t.me/informationsec/692"}, {"timestamp": "2026-08-24T00:00:08.327Z", "date_only": false, "value": "2026-08-24T00:00:08.327591Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/informationsec/692", "record": "CVE-2015-7547", "field": "creation_timestamp", "uuid": "3117f030-7fd3-4d2b-9de4-1bfd919c8f7b", "content": "\u0645\u0631\u0648\u0631\u06cc \u0628\u0631 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u062e\u06cc\u0631 Glibc\n\n\u0627\u062d\u062a\u0645\u0627\u0644\u0627 \u0647\u0645\u0647 \u062f\u0648\u0633\u062a\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u062e\u06cc\u0631\u06cc \u06a9\u0647 \u062f\u0631 Glibc \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0622\u06af\u0627\u0647\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0646\u062f.  \u0628\u062d\u062b \u0647\u0627\u06cc \u0632\u06cc\u0627\u062f\u06cc \u062f\u0631 \u0627\u06cc\u0646 \u062e\u0635\u0648\u0635 \u062a\u0627 \u06a9\u0646\u0648\u0646 \u062f\u0631 \u0628\u06cc\u0646 \u0645\u062a\u062e\u0635\u0635\u06cc\u0646 \u0645\u0637\u0631\u062d \u0634\u062f\u0647 \u0648 \u0645\u0627 \u0631\u0627 \u0628\u0631 \u0622\u0646 \u062f\u0627\u0634\u062a \u06a9\u0647 \u0628\u0631\u0631\u0633\u06cc \u062f\u0642\u06cc\u0642 \u0648 \u062c\u0627\u0645\u0639 \u062a\u0631\u06cc \u062f\u0631 \u0627\u06cc\u0646 \u062e\u0635\u0648\u0635 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u06cc\u0645.\n@informationsec\n\u062d\u062f\u0648\u062f \u06cc\u06a9 \u0633\u0627\u0644 \u067e\u06cc\u0634 \u0628\u0648\u062f \u06a9\u0647  glibc\u060c \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647 GNU C \u060c \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc GHOST  \u0631\u0627 \u062a\u062c\u0631\u0628\u0647 \u06a9\u0631\u062f \u0648 \u0628\u0627\u0632 \u0647\u0645 \u0627\u0645\u0633\u0627\u0644 \u062f\u0631 \u0645\u0639\u0631\u0636 \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u0647\u0645 \u062f\u06cc\u06af\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062a\u0642\u0631\u06cc\u0628\u0627 \u0628\u0631 \u062a\u0645\u0627\u0645 \u0645\u0627\u0634\u06cc\u0646 \u0647\u0627\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 Linux\u060c API web services  \u0648 web frameworks  \u0647\u0627\u06cc \u0628\u0632\u0631\u06af\u06cc \u06a9\u0647 \u062f\u0631 \u0622\u0646 \u0627\u06cc\u0646 \u06a9\u062f \u0627\u062c\u0631\u0627 \u0645\u06cc \u0634\u0648\u062f\u060c \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc \u06af\u0630\u0627\u0631\u062f.\n\n\u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647 Glibc \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647 C \u06cc\u06cc \u0627\u0633\u062a \u06a9\u0647 systems call \u0647\u0627 \u0648 \u0633\u0627\u06cc\u0631 \u062a\u0648\u0627\u0628\u0639 \u067e\u0627\u06cc\u0647 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc Linux \u06cc\u06cc \u0634\u0627\u0645\u0644 GNU OS \u0648GNU Linux \u0631\u0627 \u062a\u0639\u0631\u06cc\u0641 \u0645\u06cc \u06a9\u0646\u062f.\n@informationsec\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0645\u0633\u062a\u0642\u0644 \u062a\u0648\u0633\u0637 \u0645\u062d\u0642\u0642\u0627\u0646 \u062f\u0631 Google \u0648 Red Hat \u06a9\u0634\u0641 \u0634\u062f\u060c Patch \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0646\u0642\u0635\u060c CVE-2015-7547\u060c \u06cc\u06a9 \u0633\u0631\u0631\u06cc\u0632 \u0628\u0627\u0641\u0631 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u067e\u0634\u062a\u0647(stack-based buffer overflow) \u062f\u0631 glibc DNS client-side resolver  \u0627\u0633\u062a \u06a9\u0647 \u0645\u0627\u0634\u06cc\u0646 \u0647\u0627\u06cc Linux \u0631\u0627 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc \u062f\u0647\u062f.\n\u0645\u062a\u062e\u0635\u0635\u06cc\u0646 Google \u062f\u0631 \u0631\u0627\u0647\u0646\u0645\u0627\u06cc\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062e\u0648\u062f \u06af\u0641\u062a\u0647 \u0627\u0646\u062f \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u0632 \u062a\u0627\u0628\u0639 getaddrinfo () \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u0646\u062f \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u062a\u0648\u0633\u0637 domain name\u0647\u0627 \u0648 \u06cc\u0627 DNS servers  \u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0645\u0647\u0627\u062c\u0645 \u0622\u0646\u0647\u0627 \u0631\u0627 \u06a9\u0646\u062a\u0631\u0644 \u0645\u06cc \u06a9\u0646\u0646\u062f \u0648 \u06cc\u0627 \u062d\u0645\u0644\u0647 man-in-the-middle\u060c exploit \u0634\u0648\u0646\u062f.\n@informationsec\n\u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u062f\u0631 \u062a\u0645\u0627\u0645 \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc glibc \u0627\u0632 2.9 \u0628\u0647 \u0628\u0627\u0644\u0627 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u0648 \u0628\u0627\u06cc\u0633\u062a\u06cc \u062f\u0631 \u0627\u0633\u0631\u0639 \u0648\u0642\u062a \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06af\u0631\u062f\u062f.\n\n\u062f\u0631\u0635\u0648\u0631\u062a\u06cc \u06a9\u0647 \u0646\u062a\u0648\u0627\u0646 \u062f\u0631 \u0627\u0633\u0631\u0639 \u0648\u0642\u062a \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0631\u0627 patch \u0646\u0645\u0648\u062f \u0645\u06cc \u062a\u0648\u0627\u0646 \u0627\u0632 \u0631\u0627\u0647\u06a9\u0627\u0631 \u0632\u06cc\u0631 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u0631\u0648\u0634 \u0645\u0648\u0642\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f.\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u062a\u06a9\u06cc \u0628\u0631 \u067e\u0627\u0633\u062e UDP \u06cc\u0627 TCP \u0628\u0632\u0631\u06af (\u0628\u06cc\u0634 \u062a\u0631 \u0627\u0632 2048 \u0628\u0627\u06cc\u062a) \u0627\u0633\u062a \u06a9\u0647 \u067e\u0627\u0633\u062e \u062f\u06cc\u06af\u0631\u06cc \u0631\u0627 \u0628\u0647 \u062f\u0646\u0628\u0627\u0644 \u062e\u0648\u0627\u0647\u062f \u062f\u0627\u0634\u062a \u0648 \u067e\u0634\u062a\u0647 \u0631\u0627 overwrite \u0645\u06cc \u06a9\u0646\u062f. \n\n\u067e\u06cc\u0634\u0646\u0647\u0627\u062f \u0645\u062a\u062e\u0635\u0635\u06cc\u0646 Google\u060c \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0633\u0627\u06cc\u0632 \u067e\u0627\u0633\u062e\u06cc \u06a9\u0647 \u062a\u0648\u0633\u0637 DNS resolver \u067e\u0630\u06cc\u0631\u0641\u062a\u0647 \u0645\u06cc \u0634\u0648\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 DNSMasq \u06cc\u0627 \u0628\u0631\u0646\u0627\u0645\u0647 \u0647\u0627\u06cc \u0645\u0634\u0627\u0628\u0647 \u060c \u0627\u0633\u062a. \n\u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u0637\u0645\u06cc\u0646\u0627\u0646 \u062d\u0627\u0635\u0644 \u06af\u0631\u062f\u062f \u06a9\u0647 DNS query \u0647\u0627 \u0641\u0642\u0637 \u0628\u0647 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc DNS  \u06cc\u06cc \u06a9\u0647  \u0627\u0646\u062f\u0627\u0632\u0647 \u067e\u0627\u0633\u062e UDP  \u0622\u0646\u0647\u0627 \u0628\u0627 truncation bit set \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0627\u0644\u0628\u062a\u0647 \u062f\u0631 \u0645\u0648\u0631\u062f \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0633\u0627\u06cc\u0632 \u0628\u0627\u06cc\u062f \u062f\u0642\u062a \u0628\u06cc\u0634\u062a\u0631\u06cc \u0628\u0647 \u062e\u0631\u062c \u062f\u0627\u062f. \u062f\u0644\u06cc\u0644 \u0627\u06cc\u0646 \u0627\u0645\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627 \u0627\u0632 \u0627\u0645\u06a9\u0627\u0646\u0627\u062a \u067e\u06cc\u0634\u0631\u0641\u062a\u0647 \u0627\u06cc \u0645\u062b\u0644 DNSSEC \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 EDNS0  \u0646\u06cc\u0627\u0632 \u062f\u0627\u0631\u062f \u0648 \u0627\u06cc\u0646 \u0648\u06cc\u0698\u06af\u06cc \u0647\u0645 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631 \u06a9\u0631\u062f \u0635\u062d\u06cc\u062d \u0646\u06cc\u0627\u0632\u0645\u0646\u062f \u067e\u0630\u06cc\u0631\u0634 \u067e\u0627\u0633\u062e \u0647\u0627\u06cc \u0628\u0627\u0644\u0627\u062a\u0631 \u0627\u0632 512 byte  \u062a\u0648\u0633\u0637 \u0633\u0631\u0648\u0631 \u0627\u0633\u062a.\n@informationsec\n\u06af\u0632\u0627\u0631\u0634 Google \u0627\u0634\u0627\u0631\u0647 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 exploitation vector \u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0628\u0631\u0627\u06cc \u062d\u0645\u0644\u0647 \u0628\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u062f\u060c ssh\u060c sudo \u0648 curl \u0648 \u0633\u0627\u06cc\u0631 \u0645\u0648\u0627\u0631\u062f \u0627\u0633\u062a.\n\u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u0634\u0627\u0631\u0647 \u0634\u062f\u0647 \u06a9\u0647 Remote code execution \u0627\u0645\u06a9\u0627\u0646 \u067e\u0630\u06cc\u0631 \u0627\u0633\u062a \u0627\u0645\u0627 \u0633\u0631\u0631\u0627\u0633\u062a(straightforward)  \u0646\u06cc\u0633\u062a. \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u06a9\u0627\u0631 \u0646\u06cc\u0627\u0632 \u0627\u0633\u062a \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0648\u062c\u0648\u062f \u0628\u0631 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627 \u0645\u062b\u0644 ASLR(Address space layout randomization) \u0631\u0627 \u0628\u062a\u0648\u0627\u0646 bypass \u0646\u0645\u0648\u062f.\n\n\u0646\u06af\u0631\u0627\u0646\u06cc \u062f\u0631 \u062e\u0635\u0648\u0635 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u062f\u0644\u06cc\u0644 \u062a\u0639\u062f\u0627\u062f \u0632\u06cc\u0627\u062f \u0633\u06cc\u0633\u062a\u0645\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0627\u0633\u062a \u06a9\u0647 \u062a\u0645\u0627\u0645 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0645\u0628\u062a\u0646\u06cc \u0628\u0631Linux  \u0648 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0628\u0647 \u0646\u0648\u0639\u06cc \u0627\u0632 Glibc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u0646\u062f \u0631\u0627 \u0634\u0627\u0645\u0644 \u0645\u06cc \u0634\u0648\u062f.\n@informationsec\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc_Glibc_2.9 #\u062e\u0628\u0631\n\n\u0645\u0646\u0628\u0639\nhttps://googleonlinesecurity.blogspot.com/2016/02/cve-2015-7547-glibc-getaddrinfo-stack.html\nhttps://sourceware.org/ml/libc-alpha/2016-02/msg00416.html\nhttp://www.infoworld.com/article/3033862/security/patch-now-unix-bug-puts-linux-android-and-ios-systems-at-risk.html\nhttps://isc.sans.edu/forums/diary/CVE20157547+Critical+Vulnerability+in+glibc+getaddrinfo/20737\nhttp://www.darknet.org.uk/2016/02/the-linux-glibc-exploit-what-you-need-to-know/", "url": "https://t.me/informationsec/692", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-24T00:00:08.459Z", "date_only": false, "value": "2026-08-24T00:00:08.459802Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/informationsec/693", "record": "CVE-2015-7547", "field": "creation_timestamp", "uuid": "7f6cb01a-1930-4041-af12-67b3979ab034", "content": "\u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062a\u06a9\u0645\u06cc\u0644\u06cc \u062f\u0631 \u062e\u0635\u0648\u0635 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Glibc \u0648 \u0631\u0648\u0634\u0647\u0627\u06cc Mitigation \u0622\u0646\n\nhttps://sourceware.org/bugzilla/show_bug.cgi?id=18665\n\n- Mitigating factors for UDP include:\n\u00a0 - A firewall that drops UDP DNS packets > 512 bytes.\n\u00a0 - A local resolver (that drops non-compliant responses).\n\u00a0 - Avoid dual A and AAAA queries (avoids buffer management error) e.g.\n\u00a0 \u00a0 Do not use AF_UNSPEC.\n\u00a0 - No use of options edns0 in /etc/resolv.conf since EDNS0 allows\n\u00a0 \u00a0 responses larger than 512 bytes and can lead to valid DNS responses\n\u00a0 \u00a0 that overflow.\n\u00a0 - No use of RES_USE_EDNS0 or RES_USE_DNSSEC since they can both\n\u00a0 \u00a0 lead to valid large EDNS0-based DNS responses that can overflow.\n\n- Mitigating factors for TCP include:\n\u00a0 - Limit all replies to 1024 bytes.\n\n- Mitigations that don't work:\n\u00a0 - Setting options single-request does not change buffer management\n\u00a0 \u00a0 and does not prevent the exploit.\n\u00a0 - Setting options single-request-reopen does not change buffer\n\u00a0 \u00a0 management and does not prevent the exploit.\n\u00a0 - Disabling IPv6 does not disable AAAA queries. The use of AF_UNSPEC\n\u00a0 \u00a0 unconditionally enables the dual query.\n\u00a0 \u00a0 - The use of sysctl -w net.ipv6.conf.all.disable_ipv6=1 will not\n\u00a0 \u00a0 \u00a0 protect your system from the exploit.\n\u00a0 - Blocking IPv6 at a local or intermediate resolver does not work to\n\u00a0 \u00a0 prevent the exploit. The exploit payload can be delivered in A or\n\u00a0 \u00a0 AAAA results, it is the parallel query that triggers the buffer\n\u00a0 \u00a0 management flaw.\n\n\u2796\u2796\u2796\u2796\n@informationsec\n\n\u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc Bind \u0628\u0631\u0627\u06cc truncation bit set(BIND 9 CONFIGURATION REFERENCE)\n\nnamed.conf \ud83d\udc49 options \ud83d\udc49rate-limit \ud83d\udc49 [ slip number ; ]\n\u2796\u2796\u2796\u2796\nDnsmasq\nhttp://www.thekelleys.org.uk/dnsmasq/doc.html\nhttps://wiki.debian.org/HowTo/dnsmasq\n\u2796\u2796\u2796\u2796\nASLR technique\nhttps://en.wikipedia.org/wiki/Address_space_layout_randomization\n\u2796\u2796\u2796\u2796\n@informationsec\n\nRule \u0647\u0627\u06cc \u067e\u06cc\u0634\u0646\u0647\u0627\u062f\u06cc  Mitigate \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062a\u0648\u0633\u0637 snort\nCVE-2015-7547 (GlibC bug) snort rules\nhttp://seclists.org/snort/2016/q1/285\n\u2796\u2796\u2796\u2796\n@informationsec\n\u0648\u0636\u0639\u06cc\u062a \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0648 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0648 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 Cisco\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160218-glibc\n\u2796\u2796\u2796\u2796\n\u0631\u0627\u0647\u06a9\u0627\u0631 \u067e\u06cc\u0634\u0646\u0647\u0627\u062f\u06cc \u0628\u0631\u0627\u06cc Mitigate \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a Cisco\nCVE-2015-7547, glibc vulnerability; its impact on Cisco products and our mitigation solutions\n\nhttp://info.stack8.com/blog/cve20157547-google-glibc-vulnerability-cisco-products\n\u2796\u2796\u2796\u2796\n\u0648\u0636\u0639\u06cc\u062a \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 Debian\nhttps://security-tracker.debian.org/tracker/CVE-2015-7547\n\u2796\u2796\u2796\u2796\nCVE-2015-7547-poc\nhttps://github.com/fjserna/CVE-2015-7547\n\n@informationsec", "url": "https://t.me/informationsec/693", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T08:46:00Z", "date_only": false, "value": "2026-09-15T08:46:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-RU-2016:0496-1", "record": "SUSE-RU-2016:0496-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T10:56:17Z", "date_only": false, "value": "2026-09-20T10:56:17Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2016:0176", "record": "RHSA-2016:0176", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T10:56:17Z", "date_only": false, "value": "2026-09-20T10:56:17Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2016:0176", "record": "RHSA-2016:0176", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T11:57:55Z", "date_only": false, "value": "2026-09-20T11:57:55Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-RU-2016:0496-1", "record": "SUSE-RU-2016:0496-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-20T11:57:55Z", "date_only": false, "value": "2026-09-20T11:57:55Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-RU-2016:0496-1", "record": "SUSE-RU-2016:0496-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T12:10:46Z", "date_only": false, "value": "2026-09-20T12:10:46Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2016:0470-1", "record": "SUSE-SU-2016:0470-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T12:10:46Z", "date_only": false, "value": "2026-09-20T12:10:46Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2016:0470-1", "record": "SUSE-SU-2016:0470-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T12:10:47Z", "date_only": false, "value": "2026-09-20T12:10:47Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2016:0471-1", "record": "SUSE-SU-2016:0471-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T12:10:47Z", "date_only": false, "value": "2026-09-20T12:10:47Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2016:0471-1", "record": "SUSE-SU-2016:0471-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T12:10:48Z", "date_only": false, "value": "2026-09-20T12:10:48Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2016:0472-1", "record": "SUSE-SU-2016:0472-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T12:10:48Z", "date_only": false, "value": "2026-09-20T12:10:48Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2016:0472-1", "record": "SUSE-SU-2016:0472-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T12:10:49Z", "date_only": false, "value": "2026-09-20T12:10:49Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2016:0473-1", "record": "SUSE-SU-2016:0473-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T12:10:49Z", "date_only": false, "value": "2026-09-20T12:10:49Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2016:0473-1", "record": "SUSE-SU-2016:0473-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T12:11:26Z", "date_only": false, "value": "2026-09-20T12:11:26Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2016:0748-1", "record": "SUSE-SU-2016:0748-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T12:11:26Z", "date_only": false, "value": "2026-09-20T12:11:26Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2016:0748-1", "record": "SUSE-SU-2016:0748-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T12:11:38Z", "date_only": false, "value": "2026-09-20T12:11:38Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2016:0778-1", "record": "SUSE-SU-2016:0778-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T12:11:38Z", "date_only": false, "value": "2026-09-20T12:11:38Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2016:0778-1", "record": "SUSE-SU-2016:0778-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T12:11:42Z", "date_only": false, "value": "2026-09-20T12:11:42Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2016:0786-1", "record": "SUSE-SU-2016:0786-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T12:11:42Z", "date_only": false, "value": "2026-09-20T12:11:42Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2016:0786-1", "record": "SUSE-SU-2016:0786-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:53:14Z", "date_only": false, "value": "2026-09-20T19:53:14Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10154-1", "record": "OPENSUSE-SU-2024:10154-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:53:14Z", "date_only": false, "value": "2026-09-20T19:53:14Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10154-1", "record": "OPENSUSE-SU-2024:10154-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-08T11:00:15Z", "date_only": false, "value": "2026-10-08T11:00:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/PY_67xmTxm2Q2F6MmOUk4JQ3gShJ_02sRM1bZXhQVJeEw20", "record": "CVE-2015-7547", "field": "creation_timestamp", "uuid": "84bb7f3f-797e-471e-9e04-323f2c9c56be", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-10-29T02:30:19.652Z", "anchors": {"origin": {"timestamp": "2015-12-11T00:00:00Z", "date_only": false, "value": "2015-12-11T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2016:0175", "record": "RHSA-2016:0175", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "discovery": {"timestamp": "2015-12-11T00:00:00Z", "date_only": false, "value": "2015-12-11T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2016:0175", "record": "RHSA-2016:0175", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2015-07-13T00:00:00Z", "date_only": false, "value": "2015-07-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2015-7547", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2016-02-16T00:00:00Z", "date_only": false, "value": "2016-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/39454", "record": "CVE-2015-7547", "field": "creation_timestamp", "uuid": "20f86e90-b15a-4c27-8413-ad366d3a46ea", "url": "https://www.exploit-db.com/exploits/39454", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2016-02-16T15:19:38Z", "date_only": false, "value": "2016-02-16T15:19:38+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2016:0175", "record": "RHSA-2016:0175", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 18835200.0, "hours": 5232.0, "days": 218.0, "min_seconds": 18748800.0, "max_seconds": 18921600.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2015-07-13T00:00:00Z", "date_only": false, "value": "2015-07-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2015-7547", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2016-02-16T00:00:00Z", "date_only": false, "value": "2016-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/39454", "record": "CVE-2015-7547", "field": "creation_timestamp", "uuid": "20f86e90-b15a-4c27-8413-ad366d3a46ea", "url": "https://www.exploit-db.com/exploits/39454", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 5843978.0, "hours": 1623.3272222222222, "days": 67.63863425925926, "min_seconds": 5757578.0, "max_seconds": 5843978.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2015-12-11T00:00:00Z", "date_only": false, "value": "2015-12-11T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2016:0175", "record": "RHSA-2016:0175", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2016-02-16T15:19:38Z", "date_only": false, "value": "2016-02-16T15:19:38+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2016:0175", "record": "RHSA-2016:0175", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "disclosure_to_patch": {"available": true, "seconds": 18890378.0, "hours": 5247.327222222222, "days": 218.63863425925925, "min_seconds": 18803978.0, "max_seconds": 18890378.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2015-07-13T00:00:00Z", "date_only": false, "value": "2015-07-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat", "record": "CVE-2015-7547", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2016-02-16T15:19:38Z", "date_only": false, "value": "2016-02-16T15:19:38+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2016:0175", "record": "RHSA-2016:0175", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 5843978.0, "hours": 1623.3272222222222, "days": 67.63863425925926, "min_seconds": 5757578.0, "max_seconds": 5843978.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2015-12-11T00:00:00Z", "date_only": false, "value": "2015-12-11T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2016:0175", "record": "RHSA-2016:0175", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2016-02-16T15:19:38Z", "date_only": false, "value": "2016-02-16T15:19:38+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2016:0175", "record": "RHSA-2016:0175", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 55178.0, "hours": 15.327222222222222, "days": 0.6386342592592592, "min_seconds": -31222.0, "max_seconds": 55178.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2016-02-16T00:00:00Z", "date_only": false, "value": "2016-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/39454", "record": "CVE-2015-7547", "field": "creation_timestamp", "uuid": "20f86e90-b15a-4c27-8413-ad366d3a46ea", "url": "https://www.exploit-db.com/exploits/39454", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2016-02-16T15:19:38Z", "date_only": false, "value": "2016-02-16T15:19:38+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2016:0175", "record": "RHSA-2016:0175", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}}}