Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-4527
HistorySep 18, 2023 - 5:15 p.m.

CVE-2023-4527

2023-09-1817:15:55
CWE-125
CWE-121
[email protected]
web.nvd.nist.gov
2
glibc
getaddrinfo
af_unspec
no-aaaa mode
dns response
tcp
stack contents
crash

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.9%

JSON

A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash.

Affected configurations

NVD
Node
gnuglibcRange<2.39
Node
redhatcodeready_linux_builder_eusMatch9.2
OR
redhatcodeready_linux_builder_eus_for_power_little_endianMatch9.0_ppc64le
OR
redhatcodeready_linux_builder_eus_for_power_little_endian_eusMatch9.2_ppc64le
OR
redhatcodeready_linux_builder_for_arm64Match9.0_aarch64
OR
redhatcodeready_linux_builder_for_arm64_eusMatch9.2_aarch64
OR
redhatcodeready_linux_builder_for_ibm_z_systemsMatch9.0_s390x
OR
redhatcodeready_linux_builder_for_ibm_z_systems_eusMatch9.2_s390x
OR
redhatenterprise_linuxMatch8.0
OR
redhatenterprise_linuxMatch9.0
OR
redhatenterprise_linux_eusMatch8.8
OR
redhatenterprise_linux_eusMatch9.2
OR
redhatenterprise_linux_for_arm_64Match9.0_aarch64
OR
redhatenterprise_linux_for_arm_64_eusMatch9.2_aarch64
OR
redhatenterprise_linux_for_ibm_z_systemsMatch8.0_s390x
OR
redhatenterprise_linux_for_ibm_z_systems_eusMatch8.8_s390x
OR
redhatenterprise_linux_for_ibm_z_systems_eus_s390xMatch9.2
OR
redhatenterprise_linux_for_ibm_z_systems_s390xMatch9.2
OR
redhatenterprise_linux_for_power_little_endianMatch8.0_ppc64le
OR
redhatenterprise_linux_for_power_little_endianMatch9.2_ppc64le
OR
redhatenterprise_linux_for_power_little_endian_eusMatch8.8_ppc64le
OR
redhatenterprise_linux_for_power_little_endian_eusMatch9.2_ppc64le
OR
redhatenterprise_linux_server_ausMatch9.2
OR
redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch9.2_ppc64le
OR
redhatenterprise_linux_tusMatch8.8
Node
fedoraprojectfedoraMatch37
OR
fedoraprojectfedoraMatch38
OR
fedoraprojectfedoraMatch39
Node
netapph300sMatch-
AND
netapph300s_firmwareMatch-
Node
netapph500sMatch-
AND
netapph500s_firmwareMatch-
Node
netapph700sMatch-
AND
netapph700s_firmwareMatch-
Node
netapph410sMatch-
AND
netapph410s_firmwareMatch-
Node
netapph410cMatch-
AND
netapph410c_firmwareMatch-

Related

redhatcve 1
ubuntucve 1
cvelist 1
cve 1
osv 5
ibm 9
wolfi 1
prion 1
cgr 1
debiancve 1
openvas 6
nessus 19
ubuntu 1
cloudfoundry 1
mageia 1
debian 1
fedora 3
oraclelinux 4
rocky 1
almalinux 2
redhat 63
rosalinux 1
gentoo 1
photon 1
oracle 1
ics 1
redhatcve
redhatcve
CVE-2023-4527
2023-09-12 14:54:17
ubuntucve
ubuntucve
CVE-2023-4527
2023-09-18 00:00:00
cvelist
cvelist
CVE-2023-4527 Glibc: stack read overflow in getaddrinfo in no-aaaa mode
2023-09-18 16:32:18
cve
cve
CVE-2023-4527
2023-09-18 17:15:55
osv
osv
CVE-2023-4527
2023-09-18 17:15:55
glibc vulnerabilities
2023-10-03 18:04:23
Important: glibc security update
2023-10-06 22:57:06
ibm
ibm
Security Bulletin: IBM Storage Ceph is vulnerable to Out-of-bounds Read in the RHEL UBI (CVE-2023-4527)
2024-01-19 22:15:16
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities (CVE-2023-4806, CVE-2023-4155, CVE-2023-4527)
2024-01-24 19:00:38
Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from libcurl, glibc-minimal-langpack, glibc-common, ncurses-libs and Kubernetes
2023-11-16 16:21:31
wolfi
wolfi
CVE-2023-4527 vulnerabilities
2024-07-05 21:08:40
prion
prion
Design/Logic Flaw
2023-09-18 17:15:00
cgr
cgr
CVE-2023-4527 vulnerabilities
2024-05-19 03:07:16
debiancve
debiancve
CVE-2023-4527
2023-09-18 17:15:55
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0270)
2023-09-28 00:00:00
Ubuntu: Security Advisory (USN-6409-1)
2023-10-04 00:00:00
Debian: Security Advisory (DSA-5514-1)
2023-10-04 00:00:00
nessus
nessus
CentOS 9 : glibc-2.34-83.el9.3
2024-04-26 00:00:00
Ubuntu 22.04 LTS / 23.04 : GNU C Library vulnerabilities (USN-6409-1)
2023-10-03 00:00:00
Fedora 39 : glibc (2023-63e5a77522)
2023-11-07 00:00:00
ubuntu
ubuntu
GNU C Library vulnerabilities
2023-10-03 00:00:00
cloudfoundry
cloudfoundry
USN-6409-1: GNU C Library vulnerabilities | Cloud Foundry
2024-03-18 00:00:00
mageia
mageia
Updated glibc packages fix security and other bugs
2023-09-27 19:31:30
debian
debian
[SECURITY] [DSA 5514-1] glibc security update
2023-10-03 17:26:13
fedora
fedora
[SECURITY] Fedora 37 Update: glibc-2.36-14.fc37
2023-10-04 15:49:21
[SECURITY] Fedora 38 Update: glibc-2.37-10.fc38
2023-10-04 15:52:08
[SECURITY] Fedora 39 Update: glibc-2.38-6.fc39
2023-10-04 17:16:19
oraclelinux
oraclelinux
glibc security update
2023-10-12 00:00:00
glibc security update
2023-12-19 00:00:00
glibc security update
2023-10-10 00:00:00
rocky
rocky
glibc security update
2023-10-06 22:57:06
almalinux
almalinux
Important: glibc security update
2023-10-05 00:00:00
Important: glibc security update
2023-10-05 00:00:00
redhat
redhat
(RHSA-2023:5453) Important: glibc security update
2023-10-05 10:04:00
(RHSA-2023:5455) Important: glibc security update
2023-10-05 10:08:32
(RHSA-2023:5801) Important: Migration Toolkit for Runtimes security update
2023-10-17 16:07:09
rosalinux
rosalinux
Advisory ROSA-SA-2024-2332
2024-01-30 08:26:13
gentoo
gentoo
glibc: Multiple vulnerabilities
2023-10-04 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0110
2023-10-06 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.9%

JSON
Related for NVD:CVE-2023-4527
redhatcve1ubuntucve1cvelist1cve1osv5ibm9wolfi1prion1cgr1debiancve1openvas6nessus19ubuntu1cloudfoundry1mageia1debian1fedora3oraclelinux4rocky1almalinux2redhat63rosalinux1gentoo1photon1oracle1ics1