The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent attackers to cause a denial of service (invalid free) and possibly execute arbitrary code via unspecified vectors, as demonstrated by an internationalized domain name to ping6.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade glibc-utilsUpgrade glibc-commonUpgrade nscdUpgrade glibc-develUpgrade glibcUpgrade glibc-headers | Dec 1, 2016 | Aug 26, 2015 |
| Debian | — | Upgrade glibcUpgrade eglibc | Jul 30, 2024 | Aug 26, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 3, 2015 |
| Oracle_linux | — | Upgrade glibc-develUpgrade glibc-commonUpgrade glibc-headersUpgrade glibcUpgrade glibc-utilsUpgrade nscd | Oct 16, 2024 | Aug 26, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub