VIR Vulnerability Intelligence Relay

CVE-2015-7510

critical
Published 2017-09-25 · Modified 2026-05-13
CVSS v3
9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2
7.5
VIR risk
9.8

Description

Stack-based buffer overflow in the getpwnam and getgrnam functions of the NSS module nss-mymachines in systemd.

Predictions

Exploit likelihood
97%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2015-7510

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — https://github.com/systemd/systemd/issues/2002

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — https://github.com/keszybz/systemd/commit/cb31827d62066a04b02111df3052949fda4b6888

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — https://bugzilla.redhat.com/show_bug.cgi?id=1284642

OS impact
OSVersionStatusFixed in
debian debianbookwormfixed229-1
debian debianbullseyefixed229-1
debian debianforkyfixed229-1
debian debiansidfixed229-1
debian debiantrixiefixed229-1

Application impact
VendorProductVersionsFixed
systemd_projectsystemd223

References

CWEs

CWE-119

Verify integrity in audit chain (admin only). AS-IS.