K16472 : glibc vulnerability CVE-2013-7424

Security Advisory Description

The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent attackers to cause a denial of service (invalid free) and possibly execute arbitrary code via unspecified vectors, as demonstrated by an internationalized domain name to ping6. (CVE-2013-7424)
Impact
An attacker may be able to execute arbitrary code with the permissions of the user running the application. The traceroute utility uses the vulnerable functions in a way that exposes this vulnerability to a local attacker.