Beveiligingsadvies

CVE-2026-5358

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-20 20:37:23

Laatst bijgewerkt 2026-04-22 13:04:20

Toegewezen door glibc

CVSS-score geen score

Status REJECTED

Beschrijving

REJECTED: CVE-2026-5358 is rejected for two reasons. Firstly it has been discovered that no NIS+ client or server was ever released for any Linux-based OS distributions and as such this makes the API provisional and unused. Secondly it has been discovered that the NIS+ cold start cache (/var/nis/NIS_COLD_START) cannot be bypassed and as such the API can only be called with a trusted server from the pre-populated cache. The use of a trusted server means no trust boundary is crossed and this is therefore considered a normal bug.

← Alle CVE's bekijken Bekijk op cve.org ↗