The eglibc package before 2.14 incorrectly handled the getaddrinfo() function. An attacker could use this issue to cause a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade sle-sdk-releaseUpgrade glibc-profile-32bitUpgrade glibc-devel-32bitUpgrade glibc-infoUpgrade glibcUpgrade nscdUpgrade glibc-locale-32bitUpgrade glibc-profile-x86Upgrade glibc-htmlUpgrade glibc-x86Upgrade glibc-i18ndataUpgrade glibc-locale-x86Upgrade glibc-32bitUpgrade glibc-develUpgrade glibc-profileUpgrade glibc-locale | Jun 17, 2014 | Jun 17, 2014 |
| Ubuntu | — | Upgrade libc6 | Nov 8, 2024 | Dec 31, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
