In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-scUpgrade glibc-langpack-siUpgrade glibc-langpack-zhUpgrade glibc-langpack-guUpgrade glibc-langpack-eoUpgrade glibc-langpack-mrUpgrade glibc-langpack-gezUpgrade glibc-langpack-crhUpgrade glibc-langpack-nanUpgrade glibc-langpack-gaUpgrade glibc-langpack-tiUpgrade glibc-langpack-zuUpgrade glibc-langpack-yoUpgrade libcryptUpgrade glibc-langpack-ruUpgrade libcrypt-nssUpgrade glibc-langpack-heUpgrade glibc-langpack-uzUpgrade glibc-langpack-isUpgrade glibc-langpack-mhrUpgrade glibc-langpack-aycUpgrade glibc-langpack-dzUpgrade glibc-langpack-hakUpgrade glibc-langpack-ptUpgrade glibc-langpack-jaUpgrade glibc-langpack-swUpgrade glibc-langpack-kokUpgrade glibc-langpack-deUpgrade glibc-langpack-lgUpgrade glibc-langpack-skUpgrade glibc-langpack-lnUpgrade glibc-langpack-saUpgrade glibc-langpack-rwUpgrade glibc-langpack-hneUpgrade glibc-langpack-esUpgrade nss_nisUpgrade glibc-langpack-nlUpgrade glibc-langpack-bhbUpgrade glibc-langpack-iuUpgrade glibc-minimal-langpackUpgrade glibc-langpack-brUpgrade glibc-langpack-caUpgrade glibc-langpack-csUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-daUpgrade glibc-develUpgrade glibc-langpack-seUpgrade glibc-langpack-amUpgrade glibc-langpack-urUpgrade glibc-langpack-tlUpgrade glibc-langpack-tsUpgrade glibc-langpack-unmUpgrade glibc-langpack-bhoUpgrade glibc-langpack-nrUpgrade glibc-langpack-lijUpgrade glibc-langpack-mtUpgrade nss_dbUpgrade glibc-commonUpgrade glibc-langpack-ttUpgrade glibc-langpack-hyUpgrade glibc-langpack-xhUpgrade glibc-langpack-trUpgrade glibc-langpack-tigUpgrade glibc-langpack-sidUpgrade glibc-langpack-taUpgrade glibc-langpack-theUpgrade glibc-all-langpacksUpgrade glibc-langpack-berUpgrade glibc-langpack-enUpgrade glibc-langpack-ffUpgrade glibc-langpack-akUpgrade glibc-langpack-tcyUpgrade glibc-langpack-osUpgrade glibc-langpack-tnUpgrade glibc-langpack-fyUpgrade glibc-langpack-mlUpgrade glibc-langpack-lvUpgrade glibc-langpack-roUpgrade glibc-langpack-loUpgrade glibc-langpack-haUpgrade glibc-langpack-hrUpgrade glibc-langpack-ndsUpgrade glibc-langpack-stUpgrade glibc-nss-develUpgrade glibc-langpack-kyUpgrade glibc-langpack-psUpgrade nss_hesiodUpgrade glibc-langpack-klUpgrade glibc-langpack-hiUpgrade glibc-langpack-szlUpgrade glibc-langpack-sdUpgrade glibc-langpack-teUpgrade glibc-langpack-fiUpgrade glibc-langpack-elUpgrade glibc-langpack-lzhUpgrade glibc-langpack-miUpgrade glibc-langpack-rajUpgrade glibc-langpack-soUpgrade glibc-langpack-mgUpgrade glibc-langpack-cvUpgrade glibc-langpack-hsbUpgrade glibc-langpack-dvUpgrade glibc-langpack-paUpgrade glibc-langpack-huUpgrade glibc-langpack-msUpgrade glibc-langpack-sgsUpgrade glibc-langpack-doiUpgrade glibc-langpack-nhnUpgrade glibc-langpack-magUpgrade glibc-langpack-veUpgrade glibc-langpack-liUpgrade glibc-langpack-boUpgrade glibc-langpack-bemUpgrade glibc-langpack-anUpgrade glibc-langpack-plUpgrade glibc-langpack-shsUpgrade glibc-langpack-ceUpgrade glibc-langpack-lbUpgrade glibc-langpack-niuUpgrade glibc-langpack-nsoUpgrade glibc-langpack-cyUpgrade glibc-langpack-myUpgrade glibc-langpack-arUpgrade glibc-langpack-thUpgrade glibc-langpack-azUpgrade glibc-langpack-maiUpgrade glibc-langpack-bynUpgrade glibc-langpack-furUpgrade glibc-langpack-frUpgrade glibc-langpack-cmnUpgrade glibc-utilsUpgrade glibc-headersUpgrade glibc-langpack-asUpgrade glibc-langpack-tgUpgrade glibc-langpack-kkUpgrade glibc-langpack-ikUpgrade glibc-langpack-waeUpgrade glibc-langpack-ssUpgrade glibc-langpack-knUpgrade glibc-langpack-waUpgrade glibc-langpack-beUpgrade glibc-langpack-srUpgrade glibc-langpack-gvUpgrade glibc-langpack-afUpgrade glibc-langpack-mnUpgrade glibc-langpack-chrUpgrade glibc-langpack-tkUpgrade glibc-locale-sourceUpgrade glibc-langpack-ocUpgrade glibc-langpack-slUpgrade glibc-langpack-nbUpgrade glibc-langpack-kmUpgrade glibc-langpack-gdUpgrade glibc-langpack-bsUpgrade glibc-langpack-astUpgrade glibc-benchtestsUpgrade glibc-langpack-etUpgrade glibc-langpack-brxUpgrade glibc-langpack-viUpgrade glibc-langpack-kwUpgrade glibc-langpack-omUpgrade glibc-langpack-foUpgrade glibc-langpack-ukUpgrade glibc-langpack-bnUpgrade glibc-langpack-igUpgrade glibc-langpack-ugUpgrade glibc-langpack-htUpgrade glibc-langpack-quzUpgrade glibc-langpack-kaUpgrade glibc-langpack-euUpgrade glibc-langpack-filUpgrade glibc-langpack-aaUpgrade glibc-debuginfoUpgrade glibc-langpack-csbUpgrade glibc-langpack-itUpgrade nscdUpgrade glibc-langpack-yueUpgrade glibc-langpack-mkUpgrade glibc-langpack-papUpgrade glibc-langpack-satUpgrade glibc-langpack-mniUpgrade glibc-langpack-ksUpgrade glibc-langpack-glUpgrade glibc-langpack-bgUpgrade glibc-langpack-faUpgrade glibc-langpack-orUpgrade glibc-langpack-walUpgrade glibc-langpack-neUpgrade glibc-langpack-svUpgrade glibc-langpack-koUpgrade glibc-langpack-idUpgrade glibc-langpack-anpUpgrade glibc-langpack-sqUpgrade glibc-staticUpgrade glibc-langpack-yiUpgrade glibc-langpack-kuUpgrade glibcUpgrade glibc-langpack-woUpgrade glibc-langpack-nnUpgrade glibc-langpack-ltUpgrade glibc-langpack-ia | Apr 27, 2020 | Dec 4, 2018 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Dec 4, 2018 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Mar 14, 2019 | Dec 4, 2018 |
| Oracle Solaris | — | Upgrade library/python/jinja2-35 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/jinja2 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/lxml-34 to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/lxml to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3-34 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3-35 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3-27 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/jinja2-34 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko-35 to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/lxml-35 to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko-27 to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/jinja2-27 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko-34 to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/lxml-27 to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4 | Jul 17, 2019 | Dec 4, 2018 |
| Ubuntu | — | Upgrade libc6 | Aug 5, 2020 | Dec 4, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 4, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub