The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service (infinite loop) by sending a positive answer while a network name is being process.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | May 11, 2018 | Feb 24, 2015 |
| Centos_linux | — | Upgrade glibc-headersUpgrade nscdUpgrade glibcUpgrade glibc-develUpgrade glibc-debuginfo-commonUpgrade glibc-debuginfoUpgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-static | Aug 28, 2019 | Feb 24, 2015 |
| Debian | — | Upgrade eglibcUpgrade glibc | Jul 30, 2024 | Feb 24, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 23, 2015 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Feb 24, 2015 |
| Huawei Euleros 2_0_sp1 | — | Upgrade glibc-headersUpgrade nscdUpgrade glibcUpgrade glibc-staticUpgrade glibc-develUpgrade glibc-utilsUpgrade glibc-common | Nov 30, 2017 | Feb 24, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade glibc-utilsUpgrade nscdUpgrade glibc-commonUpgrade glibc-headersUpgrade glibc-develUpgrade glibc-staticUpgrade glibc | Nov 30, 2017 | Feb 24, 2015 |
| Oracle_linux | — | Upgrade nscdUpgrade glibc-headersUpgrade glibc-commonUpgrade glibc-utilsUpgrade glibcUpgrade glibc-staticUpgrade glibc-devel | Apr 19, 2018 | Feb 24, 2015 |
| Redhat_linux | — | Upgrade glibc-utilsUpgrade nscdUpgrade glibcUpgrade glibc-debuginfo-commonNo solution existsUpgrade glibc-headersUpgrade glibc-commonUpgrade glibc-debuginfoUpgrade glibc-staticUpgrade glibc-devel | Apr 11, 2018 | Feb 24, 2015 |
| Suse | — | Upgrade glibc-profile-x86Upgrade glibc-infoUpgrade pwdutilsUpgrade nscdUpgrade pam-modulesUpgrade glibc-locale-32bitUpgrade libxcryptUpgrade glibc-profile-32bitUpgrade glibc-profileUpgrade glibc-extraUpgrade glibc-x86Upgrade glibc-32bitUpgrade glibc-locale-base-32bitUpgrade glibc-utilsUpgrade glibc-i18ndataUpgrade glibc-devel-staticUpgrade glibc-langUpgrade glibc-localeUpgrade libxcrypt-32bitUpgrade pam-modules-32bitUpgrade glibc-devel-32bitUpgrade glibc-htmlUpgrade glibcUpgrade glibc-locale-baseUpgrade glibc-develUpgrade pwdutils-plugin-auditUpgrade glibc-locale-x86 | Dec 18, 2015 | Feb 24, 2015 |
| Ubuntu | — | Upgrade libc6 | Nov 8, 2024 | Feb 24, 2015 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub