In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-hakUpgrade glibc-langpack-kokUpgrade glibc-langpack-rwUpgrade glibc-langpack-isUpgrade glibc-langpack-aycUpgrade glibc-langpack-tiUpgrade glibc-langpack-ffUpgrade glibc-langpack-mlUpgrade glibc-langpack-lnUpgrade glibc-langpack-bhbUpgrade glibc-langpack-jaUpgrade glibc-langpack-mtUpgrade glibc-langpack-zhUpgrade glibc-langpack-kyUpgrade glibc-langpack-sdUpgrade glibc-langpack-zuUpgrade glibc-langpack-amUpgrade glibc-langpack-brUpgrade glibc-langpack-nlUpgrade glibc-langpack-fiUpgrade libcryptUpgrade glibc-langpack-seUpgrade libcrypt-nssUpgrade glibc-langpack-lijUpgrade glibc-langpack-crhUpgrade glibc-langpack-gaUpgrade glibc-langpack-yoUpgrade glibc-langpack-nanUpgrade glibc-langpack-daUpgrade glibc-langpack-osUpgrade glibc-develUpgrade glibc-langpack-taUpgrade glibc-commonUpgrade glibc-all-langpacksUpgrade glibc-langpack-uzUpgrade glibc-langpack-psUpgrade glibc-langpack-tigUpgrade glibc-langpack-tlUpgrade glibc-langpack-theUpgrade glibc-langpack-ttUpgrade glibc-langpack-bhoUpgrade glibc-langpack-heUpgrade glibc-langpack-tcyUpgrade nss_dbUpgrade glibc-langpack-urUpgrade glibc-langpack-teUpgrade glibc-langpack-sidUpgrade glibc-langpack-hyUpgrade glibc-langpack-trUpgrade glibc-langpack-mrUpgrade glibc-langpack-xhUpgrade glibc-langpack-nrUpgrade nss_hesiodUpgrade glibc-langpack-swUpgrade glibc-langpack-berUpgrade glibc-langpack-siUpgrade glibc-langpack-gezUpgrade glibc-langpack-klUpgrade glibc-langpack-guUpgrade glibc-langpack-szlUpgrade glibc-nss-develUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-elUpgrade glibc-langpack-hiUpgrade glibc-langpack-stUpgrade glibc-langpack-scUpgrade glibc-langpack-saUpgrade glibc-minimal-langpackUpgrade glibc-langpack-ptUpgrade glibc-langpack-skUpgrade glibc-langpack-dzUpgrade glibc-langpack-esUpgrade glibc-langpack-iuUpgrade glibc-langpack-deUpgrade glibc-langpack-loUpgrade glibc-langpack-ndsUpgrade glibc-langpack-hrUpgrade nss_nisUpgrade glibc-langpack-enUpgrade glibc-langpack-fyUpgrade glibc-langpack-hneUpgrade glibc-langpack-lgUpgrade glibc-langpack-mhrUpgrade glibc-langpack-roUpgrade glibc-langpack-tsUpgrade glibc-langpack-tnUpgrade glibc-langpack-csUpgrade glibc-langpack-caUpgrade glibc-langpack-lvUpgrade glibc-langpack-akUpgrade glibc-langpack-eoUpgrade glibc-langpack-unmUpgrade glibc-langpack-ruUpgrade glibc-langpack-haUpgrade glibc-langpack-kkUpgrade glibc-langpack-tkUpgrade glibc-langpack-neUpgrade glibc-langpack-mnUpgrade glibc-langpack-mkUpgrade glibc-langpack-woUpgrade glibc-langpack-filUpgrade glibc-langpack-viUpgrade glibc-langpack-kuUpgrade glibc-langpack-csbUpgrade glibc-langpack-aaUpgrade nscdUpgrade glibc-langpack-itUpgrade glibc-langpack-glUpgrade glibcUpgrade glibc-langpack-orUpgrade glibc-langpack-cvUpgrade glibc-langpack-hsbUpgrade glibc-langpack-beUpgrade glibc-langpack-niuUpgrade glibc-langpack-chrUpgrade glibc-langpack-gdUpgrade glibc-langpack-faUpgrade glibc-langpack-nbUpgrade glibc-langpack-ksUpgrade glibc-langpack-quzUpgrade glibc-langpack-satUpgrade glibc-langpack-etUpgrade glibc-langpack-bsUpgrade glibc-langpack-iaUpgrade glibc-benchtestsUpgrade glibc-langpack-kmUpgrade glibc-langpack-yiUpgrade glibc-staticUpgrade glibc-langpack-idUpgrade glibc-langpack-nnUpgrade glibc-langpack-anpUpgrade glibc-langpack-svUpgrade glibc-langpack-lzhUpgrade glibc-langpack-papUpgrade glibc-debuginfoUpgrade glibc-langpack-mgUpgrade glibc-langpack-mniUpgrade glibc-langpack-yueUpgrade glibc-langpack-slUpgrade glibc-langpack-afUpgrade glibc-locale-sourceUpgrade glibc-langpack-astUpgrade glibc-langpack-anUpgrade glibc-langpack-omUpgrade glibc-langpack-magUpgrade glibc-langpack-waUpgrade glibc-langpack-veUpgrade glibc-langpack-paUpgrade glibc-langpack-msUpgrade glibc-langpack-nhnUpgrade glibc-langpack-huUpgrade glibc-langpack-brxUpgrade glibc-langpack-miUpgrade glibc-langpack-sgsUpgrade glibc-langpack-kwUpgrade glibc-langpack-foUpgrade glibc-langpack-bemUpgrade glibc-langpack-gvUpgrade glibc-langpack-cyUpgrade glibc-langpack-myUpgrade glibc-langpack-shsUpgrade glibc-langpack-srUpgrade glibc-langpack-soUpgrade glibc-langpack-rajUpgrade glibc-langpack-thUpgrade glibc-langpack-nsoUpgrade glibc-langpack-htUpgrade glibc-langpack-knUpgrade glibc-langpack-igUpgrade glibc-langpack-bnUpgrade glibc-langpack-frUpgrade glibc-langpack-arUpgrade glibc-langpack-ceUpgrade glibc-langpack-lbUpgrade glibc-langpack-waeUpgrade glibc-langpack-euUpgrade glibc-langpack-plUpgrade glibc-langpack-dvUpgrade glibc-langpack-bgUpgrade glibc-langpack-bynUpgrade glibc-langpack-ikUpgrade glibc-langpack-furUpgrade glibc-langpack-asUpgrade glibc-headersUpgrade glibc-utilsUpgrade glibc-langpack-ssUpgrade glibc-langpack-tgUpgrade glibc-langpack-walUpgrade glibc-langpack-maiUpgrade glibc-langpack-cmnUpgrade glibc-langpack-ltUpgrade glibc-langpack-sqUpgrade glibc-langpack-doiUpgrade glibc-langpack-kaUpgrade glibc-langpack-ocUpgrade glibc-langpack-koUpgrade glibc-langpack-ugUpgrade glibc-langpack-ukUpgrade glibc-langpack-liUpgrade glibc-langpack-boUpgrade glibc-langpack-az | Apr 27, 2020 | Dec 4, 2018 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Dec 4, 2018 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Mar 14, 2019 | Dec 4, 2018 |
| Oracle Solaris | — | Upgrade library/python/jinja2-35 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/lxml to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/lxml-34 to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3-34 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3-35 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/jinja2 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3-27 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/jinja2-27 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko-34 to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko-27 to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/lxml-35 to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko-35 to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/jinja2-34 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/lxml-27 to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4 | Jul 17, 2019 | Dec 4, 2018 |
| Ubuntu | — | Upgrade libc6 | Aug 5, 2020 | Dec 4, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 4, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub