Lucene search

K
cvelistRedhatCVELIST:CVE-2023-4813
HistorySep 12, 2023 - 9:54 p.m.

CVE-2023-4813 Glibc: potential use-after-free in gaih_inet()

2023-09-1221:54:33
CWE-416
redhat
raw.githubusercontent.com
cve-2023-4813
glibc
memory
freed
getaddrinfo
application crash
nsswitch.conf

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.5%

A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.