The eglibc package before 2.14 incorrectly handled the getaddrinfo() function. An attacker could use this issue to cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade glibc-locale-32bitUpgrade glibc-profile-x86Upgrade nscdUpgrade glibc-profile-32bitUpgrade glibc-devel-32bitUpgrade glibc-infoUpgrade glibc-htmlUpgrade glibcUpgrade sle-sdk-releaseUpgrade glibc-32bitUpgrade glibc-localeUpgrade glibc-profileUpgrade glibc-locale-x86Upgrade glibc-i18ndataUpgrade glibc-develUpgrade glibc-x86 | Jun 17, 2014 | Jun 17, 2014 |
| Ubuntu | — | Upgrade libc6 | Nov 8, 2024 | Dec 31, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub