Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-4527HistorySep 18, 2023 - 4:32 p.m.
CVE-2023-4527
2023-09-1816:32:18
Debian Security Bug Tracker
security-tracker.debian.org
14
glibc
getaddrinfo
dns
disclosure
stack
crash
af_unspec
tcp
/etc/resolv.conf
0.001 Low
EPSS
Percentile
38.3%
A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | glibc | < 2.36-9+deb12u3 | glibc_2.36-9+deb12u3_all.deb |
| Debian | 11 | all | glibc | < 2.31-13+deb11u8 | glibc_2.31-13+deb11u8_all.deb |
| Debian | 10 | all | glibc | < 2.28-10+deb10u1 | glibc_2.28-10+deb10u1_all.deb |
| Debian | 999 | all | glibc | < 2.37-9 | glibc_2.37-9_all.deb |
| Debian | 13 | all | glibc | < 2.37-9 | glibc_2.37-9_all.deb |
Related
ubuntucve
ubuntucve
CVE-2023-4527
2023-09-18 00:00:00
redhatcve
redhatcve
CVE-2023-4527
2023-09-12 14:54:17
ibm
ibm
osv
osv
CVE-2023-4527
2023-09-18 17:15:55
glibc vulnerabilities
2023-10-03 18:04:23
Important: glibc security update
2023-10-05 00:00:00
wolfi
wolfi
CVE-2023-4527 vulnerabilities
2024-05-16 16:08:08
cve
cve
CVE-2023-4527
2023-09-18 16:32:18
cgr
cgr
CVE-2023-4527 vulnerabilities
2024-05-16 09:19:51
prion
prion
Design/Logic Flaw
2023-09-18 17:15:00
nessus
nessus
CentOS 9 : glibc-2.34-83.el9.3
2024-04-26 00:00:00
Ubuntu 22.04 LTS / 23.04 : GNU C Library vulnerabilities (USN-6409-1)
2023-10-03 00:00:00
Fedora 37 : glibc (2023-028062484e)
2023-10-04 00:00:00
ubuntu
ubuntu
GNU C Library vulnerabilities
2023-10-03 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0270)
2023-09-28 00:00:00
Ubuntu: Security Advisory (USN-6409-1)
2023-10-04 00:00:00
Debian: Security Advisory (DSA-5514-1)
2023-10-04 00:00:00
mageia
mageia
Updated glibc packages fix security and other bugs
2023-09-27 19:31:30
cloudfoundry
cloudfoundry
USN-6409-1: GNU C Library vulnerabilities | Cloud Foundry
2024-03-18 00:00:00
debian
debian
[SECURITY] [DSA 5514-1] glibc security update
2023-10-03 17:26:13
fedora
fedora
[SECURITY] Fedora 37 Update: glibc-2.36-14.fc37
2023-10-04 15:49:21
[SECURITY] Fedora 38 Update: glibc-2.37-10.fc38
2023-10-04 15:52:08
[SECURITY] Fedora 39 Update: glibc-2.38-6.fc39
2023-10-04 17:16:19
rocky
rocky
glibc security update
2023-10-06 22:57:06
oraclelinux
oraclelinux
glibc security update
2023-10-12 00:00:00
glibc security update
2023-10-10 00:00:00
glibc security update
2023-10-12 00:00:00
gentoo
gentoo
glibc: Multiple vulnerabilities
2023-10-04 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2332
2024-01-30 08:26:13
almalinux
almalinux
Important: glibc security update
2023-10-05 00:00:00
Important: glibc security update
2023-10-05 00:00:00
redhat
redhat
(RHSA-2023:5453) Important: glibc security update
2023-10-05 10:04:00
(RHSA-2023:5455) Important: glibc security update
2023-10-05 10:08:32
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0110
2023-10-06 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00