The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name servers, potentially simplifying off-path DNS spoofing attacks due to IP fragmentation.
CVSS Details
- CVSS 3.0 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade glibc | May 11, 2018 | Aug 1, 2017 |
| Centos_linux | — | Upgrade glibc-develUpgrade glibc-commonUpgrade glibc-debuginfo-commonUpgrade glibcUpgrade glibc-debuginfoUpgrade glibc-staticUpgrade glibc-headersUpgrade nscdUpgrade glibc-utils | Aug 28, 2019 | Aug 1, 2017 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Aug 1, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nscdUpgrade glibc-staticUpgrade glibcUpgrade glibc-headersUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-common | Sep 12, 2019 | Aug 1, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glibc-utilsUpgrade nscdUpgrade glibcUpgrade glibc-staticUpgrade glibc-headersUpgrade glibc-commonUpgrade glibc-devel | Sep 25, 2019 | Aug 1, 2017 |
| Oracle_linux | — | Upgrade glibcUpgrade glibc-develUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-commonUpgrade nscdUpgrade glibc-headers | Apr 19, 2018 | Apr 7, 2017 |
| Redhat_linux | — | No solution existsUpgrade glibc-debuginfo-commonUpgrade glibc-headersUpgrade glibc-commonUpgrade glibcUpgrade glibc-develUpgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-debuginfoUpgrade nscd | Apr 11, 2018 | Aug 1, 2017 |
| Suse | — | Upgrade glibc-htmlUpgrade glibc-locale-baseUpgrade glibc-localeUpgrade glibc-i18ndataUpgrade glibc-profileUpgrade glibc-devel-staticUpgrade glibc-develUpgrade glibc-locale-base-32bitUpgrade glibc-x86Upgrade glibc-locale-x86Upgrade glibc-profile-x86Upgrade nscdUpgrade glibcUpgrade glibc-utilsUpgrade glibc-extraUpgrade glibc-langUpgrade glibc-32bitUpgrade glibc-devel-32bitUpgrade glibc-infoUpgrade glibc-locale-32bitUpgrade glibc-profile-32bit | Feb 16, 2018 | Aug 1, 2017 |
| Ubuntu | — | Upgrade libc6 (Ubuntu Pro) | Dec 9, 2022 | Aug 1, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 1, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub