The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS queries to unintended locations via a large number of requests that trigger a call to the getaddrinfo function.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade glibc-headersUpgrade glibcUpgrade nscdUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-commonUpgrade glibc-static | Dec 1, 2016 | Feb 24, 2015 |
| Debian | — | Upgrade glibcUpgrade eglibc | Jul 30, 2024 | Feb 24, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Nov 12, 2015 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Feb 24, 2015 |
| Oracle_linux | — | Upgrade nscdUpgrade glibc-headersUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-develUpgrade glibcUpgrade glibc-utils | Oct 16, 2024 | Feb 24, 2015 |
| Redhat_linux | — | Upgrade glibc-debuginfo-commonUpgrade glibc-headersUpgrade glibc-commonUpgrade glibc-develUpgrade glibc-staticUpgrade nscdUpgrade glibcUpgrade glibc-debuginfoUpgrade glibc-utils | Jul 30, 2016 | Feb 24, 2015 |
| Suse | — | Upgrade glibc-profile-32bitUpgrade glibc-testsuiteUpgrade glibc-profile-x86Upgrade glibc-32bitUpgrade glibc-infoUpgrade glibcUpgrade glibc-extraUpgrade glibc-profileUpgrade glibc-x86Upgrade nscdUpgrade glibc-utils-32bitUpgrade sle-sdk-releaseUpgrade glibc-develUpgrade glibc-obsoleteUpgrade glibc-i18ndataUpgrade glibc-utilsUpgrade glibc-htmlUpgrade glibc-devel-staticUpgrade glibc-locale-32bitUpgrade glibc-localeUpgrade glibc-devel-32bitUpgrade glibc-locale-x86Upgrade glibc-devel-static-32bit | Feb 26, 2015 | Feb 24, 2015 |
| Ubuntu | — | Upgrade libc6 | Nov 8, 2024 | Feb 24, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub