Beveiligingsadvies

CVE-2023-4527

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-09-18 16:32:18

Laatst bijgewerkt 2026-07-14 11:54:15

Toegewezen door redhat

CVSS-score 6.5

Status PUBLISHED

Beschrijving

A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash.

← Alle CVE's bekijken Bekijk op cve.org ↗