In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade glibc-langpack-szlUpgrade glibc-langpack-xhUpgrade nss_dbUpgrade glibc-langpack-lijUpgrade glibc-langpack-nrUpgrade glibc-langpack-dzUpgrade libcrypt-nssUpgrade glibc-langpack-zhUpgrade glibc-langpack-haUpgrade glibc-langpack-siUpgrade glibc-langpack-seUpgrade glibc-langpack-unmUpgrade glibc-nss-develUpgrade glibc-langpack-taUpgrade glibc-langpack-sidUpgrade glibc-all-langpacksUpgrade glibc-langpack-brUpgrade glibc-langpack-hrUpgrade glibc-debuginfo-commonUpgrade glibc-langpack-amUpgrade glibc-langpack-caUpgrade glibc-langpack-elUpgrade glibc-langpack-stUpgrade glibc-langpack-fiUpgrade glibc-langpack-hneUpgrade glibc-minimal-langpackUpgrade glibc-langpack-hyUpgrade glibc-langpack-mtUpgrade glibc-langpack-mrUpgrade glibc-langpack-sdUpgrade glibc-langpack-ruUpgrade glibc-langpack-akUpgrade glibc-langpack-tlUpgrade glibc-langpack-teUpgrade glibc-langpack-berUpgrade glibc-langpack-psUpgrade glibc-langpack-ndsUpgrade glibc-langpack-roUpgrade glibc-langpack-skUpgrade glibc-langpack-enUpgrade libcryptUpgrade glibc-langpack-urUpgrade glibc-langpack-saUpgrade glibc-langpack-eoUpgrade glibc-langpack-ptUpgrade glibc-langpack-theUpgrade glibc-langpack-tcyUpgrade glibc-langpack-iuUpgrade glibc-langpack-bhbUpgrade glibc-langpack-bhoUpgrade glibc-langpack-csUpgrade glibc-langpack-daUpgrade glibc-langpack-heUpgrade glibc-langpack-ffUpgrade glibc-langpack-klUpgrade glibc-langpack-kyUpgrade glibc-langpack-nlUpgrade glibc-langpack-gaUpgrade glibc-langpack-jaUpgrade glibc-langpack-lnUpgrade glibc-langpack-hakUpgrade glibc-langpack-mhrUpgrade glibc-langpack-kokUpgrade glibc-langpack-zuUpgrade glibc-langpack-aycUpgrade glibc-langpack-tiUpgrade glibc-langpack-lgUpgrade glibc-langpack-osUpgrade glibc-langpack-guUpgrade glibc-langpack-mlUpgrade glibc-langpack-rwUpgrade glibc-langpack-swUpgrade glibc-langpack-isUpgrade glibc-langpack-deUpgrade glibc-langpack-hiUpgrade glibc-langpack-esUpgrade glibc-langpack-nanUpgrade glibc-langpack-uzUpgrade glibc-langpack-gezUpgrade glibc-langpack-scUpgrade glibc-langpack-tnUpgrade nss_nisUpgrade glibc-langpack-tsUpgrade glibc-langpack-loUpgrade nss_hesiodUpgrade glibc-commonUpgrade glibc-langpack-yoUpgrade glibc-langpack-crhUpgrade glibc-langpack-ttUpgrade glibc-langpack-fyUpgrade glibc-langpack-lvUpgrade glibc-develUpgrade glibc-langpack-tigUpgrade glibc-langpack-trUpgrade glibc-langpack-koUpgrade glibc-langpack-nnUpgrade glibc-langpack-walUpgrade glibc-langpack-faUpgrade glibc-langpack-quzUpgrade glibc-langpack-papUpgrade glibc-langpack-mniUpgrade glibc-langpack-mkUpgrade glibc-langpack-mgUpgrade glibc-langpack-euUpgrade glibc-langpack-filUpgrade glibc-langpack-bgUpgrade glibc-langpack-brxUpgrade glibc-staticUpgrade glibc-langpack-idUpgrade glibc-langpack-nhnUpgrade glibc-langpack-yiUpgrade glibc-langpack-frUpgrade glibc-langpack-cmnUpgrade glibc-langpack-asUpgrade glibc-langpack-bynUpgrade glibc-langpack-tgUpgrade glibc-langpack-ssUpgrade glibc-langpack-waeUpgrade glibc-langpack-maiUpgrade glibc-langpack-kkUpgrade glibc-headersUpgrade glibc-langpack-furUpgrade glibc-langpack-iaUpgrade glibc-utilsUpgrade glibc-langpack-ikUpgrade glibc-langpack-hsbUpgrade glibc-langpack-orUpgrade glibc-langpack-miUpgrade glibc-langpack-anUpgrade glibc-langpack-cvUpgrade glibc-langpack-paUpgrade glibc-langpack-anpUpgrade glibc-langpack-beUpgrade glibc-langpack-doiUpgrade glibc-langpack-dvUpgrade glibcUpgrade glibc-langpack-sgsUpgrade glibc-langpack-waUpgrade glibc-langpack-plUpgrade glibc-langpack-sqUpgrade glibc-langpack-woUpgrade glibc-langpack-magUpgrade glibc-langpack-neUpgrade glibc-langpack-huUpgrade glibc-langpack-liUpgrade glibc-langpack-knUpgrade glibc-langpack-igUpgrade glibc-langpack-bnUpgrade glibc-langpack-ceUpgrade glibc-langpack-ugUpgrade glibc-langpack-thUpgrade glibc-langpack-arUpgrade glibc-langpack-lbUpgrade glibc-langpack-htUpgrade glibc-langpack-chrUpgrade glibc-langpack-bsUpgrade glibc-langpack-kmUpgrade glibc-benchtestsUpgrade glibc-langpack-astUpgrade glibc-locale-sourceUpgrade glibc-langpack-gdUpgrade glibc-langpack-viUpgrade glibc-langpack-tkUpgrade glibc-langpack-ocUpgrade glibc-langpack-mnUpgrade glibc-langpack-nbUpgrade glibc-langpack-etUpgrade glibc-langpack-afUpgrade glibc-langpack-slUpgrade glibc-langpack-veUpgrade glibc-langpack-kuUpgrade glibc-langpack-ltUpgrade glibc-langpack-niuUpgrade glibc-langpack-svUpgrade glibc-langpack-msUpgrade glibc-langpack-foUpgrade glibc-langpack-omUpgrade glibc-langpack-soUpgrade glibc-langpack-shsUpgrade glibc-langpack-nsoUpgrade glibc-langpack-rajUpgrade glibc-langpack-myUpgrade glibc-langpack-kwUpgrade glibc-langpack-cyUpgrade glibc-langpack-boUpgrade glibc-langpack-azUpgrade glibc-langpack-srUpgrade glibc-langpack-bemUpgrade glibc-langpack-gvUpgrade glibc-langpack-ukUpgrade glibc-langpack-kaUpgrade glibc-langpack-itUpgrade glibc-langpack-ksUpgrade glibc-langpack-csbUpgrade glibc-langpack-aaUpgrade glibc-debuginfoUpgrade glibc-langpack-glUpgrade glibc-langpack-lzhUpgrade glibc-langpack-yueUpgrade nscdUpgrade glibc-langpack-sat | Apr 27, 2020 | Dec 4, 2018 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Dec 4, 2018 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Mar 14, 2019 | Dec 4, 2018 |
| Oracle Solaris | — | Upgrade library/python/lxml to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/jinja2 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/jinja2-35 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/lxml-34 to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3-34 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3-35 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/jinja2-34 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/jinja2-27 to version 2.10.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko-34 to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/lxml-27 to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/urllib3-27 to version 1.25.1-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/lxml-35 to version 4.3.3-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko-35 to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4Upgrade library/python/paramiko-27 to version 2.0.9-11.4.11.0.1.3.0 on Solaris 11.4 | Jul 17, 2019 | Dec 4, 2018 |
| Ubuntu | — | Upgrade libc6 | Aug 5, 2020 | Dec 4, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 4, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub