Memory leak in the __res_vinit function in the IPv6 name server management code in libresolv in GNU C Library (aka glibc or libc6) before 2.24 allows remote attackers to cause a denial of service (memory consumption) by leveraging partial initialization of internal resolver data structures.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade glibc | Jul 30, 2024 | Feb 17, 2017 |
| Suse | — | Upgrade nscdUpgrade glibcUpgrade glibc-utilsUpgrade glibc-locale-32bitUpgrade glibc-locale-base-32bitUpgrade glibc-locale-baseUpgrade glibc-langUpgrade glibc-profileUpgrade glibc-devel-staticUpgrade glibc-i18ndataUpgrade glibc-localeUpgrade glibc-extraUpgrade glibc-infoUpgrade glibc-develUpgrade glibc-32bitUpgrade glibc-devel-32bit | May 20, 2018 | Feb 16, 2017 |
| Ubuntu | — | Upgrade libc6 | Mar 21, 2017 | Feb 16, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 16, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub