The eglibc package before 2.14 incorrectly handled the getaddrinfo() function. An attacker could use this issue to cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade nscdUpgrade glibc-profile-32bitUpgrade glibc-profile-x86Upgrade glibc-locale-32bitUpgrade glibc-infoUpgrade sle-sdk-releaseUpgrade glibc-htmlUpgrade glibcUpgrade glibc-devel-32bitUpgrade glibc-profileUpgrade glibc-develUpgrade glibc-i18ndataUpgrade glibc-locale-x86Upgrade glibc-32bitUpgrade glibc-localeUpgrade glibc-x86 | Jun 17, 2014 | Jun 17, 2014 |
| Ubuntu | — | Upgrade libc6 | Nov 8, 2024 | Dec 31, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
