Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of domain conversion results.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade glibc-commonUpgrade nscdUpgrade glibcUpgrade glibc-headersUpgrade glibc-utilsUpgrade glibc-devel | Dec 1, 2016 | Apr 29, 2013 |
| Debian | — | Upgrade glibcUpgrade eglibc | Jul 30, 2024 | Apr 29, 2013 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Apr 29, 2013 |
| Oracle_linux | — | Upgrade glibc-headersUpgrade glibc-staticUpgrade nscdUpgrade glibcUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibc-devel | Oct 16, 2024 | Apr 29, 2013 |
| Suse | — | Upgrade glibc-devel-staticUpgrade glibc-32bitUpgrade glibc-devel-32bitUpgrade glibc-devel-static-32bitUpgrade nscdUpgrade glibc-obsoleteUpgrade glibc-profile-64bitUpgrade glibc-infoUpgrade glibc-htmlUpgrade glibc-utilsUpgrade glibc-profile-32bitUpgrade glibc-locale-64bitUpgrade glibc-dceext-x86Upgrade glibc-dceext-64bitUpgrade glibc-devel-64bitUpgrade glibc-extraUpgrade glibc-profileUpgrade glibc-x86Upgrade glibc-develUpgrade glibc-64bitUpgrade glibc-locale-32bitUpgrade glibc-dceext-32bitUpgrade glibc-i18ndataUpgrade glibc-dceextUpgrade glibc-testsuiteUpgrade sle-sdk-releaseUpgrade glibcUpgrade glibc-profile-x86Upgrade glibc-utils-32bitUpgrade glibc-localeUpgrade glibc-locale-x86 | Dec 12, 2013 | Apr 29, 2013 |
| Ubuntu | — | Upgrade libc6 | Nov 8, 2024 | Apr 29, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub