Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-4806
HistorySep 18, 2023 - 5:15 p.m.

CVE-2023-4806

2023-09-1817:15:55
CWE-416
[email protected]
web.nvd.nist.gov
glibc
getaddrinfo
memory access
nss module
ipv6
ipv4

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.9%

JSON

A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the nss_gethostbyname2_r and nss_getcanonname_r hooks without implementing the nss*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.

Affected configurations

NVD
Node
gnuglibcMatch2.33
Node
redhatcodeready_linux_builder_eusMatch9.2
OR
redhatcodeready_linux_builder_eus_for_power_little_endianMatch9.0_ppc64le
OR
redhatcodeready_linux_builder_eus_for_power_little_endian_eusMatch9.2_ppc64le
OR
redhatcodeready_linux_builder_for_arm64Match9.0_aarch64
OR
redhatcodeready_linux_builder_for_arm64_eusMatch9.2_aarch64
OR
redhatcodeready_linux_builder_for_ibm_z_systemsMatch9.0_s390x
OR
redhatcodeready_linux_builder_for_ibm_z_systems_eusMatch9.2_s390x
OR
redhatenterprise_linuxMatch7.0
OR
redhatenterprise_linuxMatch8.0
OR
redhatenterprise_linuxMatch9.0
OR
redhatenterprise_linux_eusMatch8.8
OR
redhatenterprise_linux_eusMatch9.2
OR
redhatenterprise_linux_for_arm_64Match9.0_aarch64
OR
redhatenterprise_linux_for_arm_64_eusMatch9.2_aarch64
OR
redhatenterprise_linux_for_ibm_z_systemsMatch8.0_s390x
OR
redhatenterprise_linux_for_ibm_z_systems_eusMatch8.8_s390x
OR
redhatenterprise_linux_for_ibm_z_systems_eus_s390xMatch9.2
OR
redhatenterprise_linux_for_ibm_z_systems_s390xMatch9.2
OR
redhatenterprise_linux_for_power_little_endianMatch8.0_ppc64le
OR
redhatenterprise_linux_for_power_little_endianMatch9.2_ppc64le
OR
redhatenterprise_linux_for_power_little_endian_eusMatch8.8_ppc64le
OR
redhatenterprise_linux_for_power_little_endian_eusMatch9.2_ppc64le
OR
redhatenterprise_linux_server_ausMatch9.2
OR
redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch9.2_ppc64le
OR
redhatenterprise_linux_tusMatch8.8
Node
fedoraprojectfedoraMatch37
OR
fedoraprojectfedoraMatch38
OR
fedoraprojectfedoraMatch39

Related

debiancve 2
cbl_mariner 1
ibm 9
nessus 37
openvas 22
redhatcve 2
osv 7
cvelist 2
prion 2
cve 2
ubuntucve 2
mageia 2
redhat 76
photon 3
nvd 1
cloudfoundry 2
ubuntu 2
debian 1
oraclelinux 4
fedora 3
rocky 1
rosalinux 1
gentoo 1
almalinux 2
hp 2
oracle 1
ics 1
debiancve
debiancve
CVE-2023-4806
2023-09-18 17:15:55
CVE-2023-5156
2023-09-25 16:15:15
cbl_mariner
cbl_mariner
CVE-2023-4806 affecting package glibc for versions less than 2.35-6
2023-11-08 02:07:28
ibm
ibm
Security Bulletin: glibc vulnerability may affect IBM Storage Scale System (CVE-2023-4806)
2023-12-12 11:56:52
Security Bulletin: IBM Storage Ceph is vulnerable to Use After Free in the RHEL UBI (CVE-2023-4806)
2024-01-19 22:30:32
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities (CVE-2023-4806, CVE-2023-4155, CVE-2023-4527)
2024-01-24 19:00:38
nessus
nessus
EulerOS Virtualization 2.10.0 : glibc (EulerOS-SA-2024-1378)
2024-03-14 00:00:00
EulerOS Virtualization 2.10.1 : glibc (EulerOS-SA-2024-1357)
2024-03-14 00:00:00
EulerOS 2.0 SP10 : glibc (EulerOS-SA-2024-1081)
2024-01-16 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-1378)
2024-03-14 00:00:00
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-1357)
2024-03-14 00:00:00
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2024-1081)
2024-01-09 00:00:00
redhatcve
redhatcve
CVE-2023-4806
2023-09-12 14:54:20
CVE-2023-5156
2023-09-25 07:54:46
osv
osv
CVE-2023-4806
2023-09-18 17:15:55
CVE-2023-5156
2023-09-25 16:15:15
glibc vulnerabilities
2023-12-07 16:24:50
cvelist
cvelist
CVE-2023-4806 Glibc: potential use-after-free in getaddrinfo()
2023-09-18 16:33:57
CVE-2023-5156 Glibc: dos due to memory leak in getaddrinfo.c
2023-09-25 15:55:15
prion
prion
Design/Logic Flaw
2023-09-18 17:15:00
Memory corruption
2023-09-25 16:15:00
cve
cve
CVE-2023-4806
2023-09-18 17:15:55
CVE-2023-5156
2023-09-25 16:15:15
ubuntucve
ubuntucve
CVE-2023-5156
2023-09-25 00:00:00
CVE-2023-4806
2023-09-18 00:00:00
mageia
mageia
Updated glibc packages fix a security vulnerability
2023-10-03 13:53:29
Updated glibc packages fix security and other bugs
2023-09-27 19:31:30
redhat
redhat
(RHSA-2023:7409) Moderate: glibc security update
2023-11-21 09:53:27
(RHSA-2023:5453) Important: glibc security update
2023-10-05 10:04:00
(RHSA-2023:5455) Important: glibc security update
2023-10-05 10:08:32
photon
photon
Moderate Photon OS Security Update - PHSA-2024-3.0-0715
2024-01-19 00:00:00
Moderate Photon OS Security Update - PHSA-2023-5.0-0107
2023-10-05 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0535
2023-12-24 00:00:00
nvd
nvd
CVE-2023-5156
2023-09-25 16:15:15
cloudfoundry
cloudfoundry
USN-6541-2: GNU C Library regression | Cloud Foundry
2024-02-29 00:00:00
USN-6541-1: GNU C Library vulnerabilities | Cloud Foundry
2024-04-04 00:00:00
ubuntu
ubuntu
GNU C Library regression
2024-01-10 00:00:00
GNU C Library vulnerabilities
2023-12-07 00:00:00
debian
debian
[SECURITY] [DSA 5514-1] glibc security update
2023-10-03 17:26:13
oraclelinux
oraclelinux
glibc security update
2023-10-12 00:00:00
glibc security update
2023-10-10 00:00:00
glibc security update
2023-10-12 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: glibc-2.36-14.fc37
2023-10-04 15:49:21
[SECURITY] Fedora 38 Update: glibc-2.37-10.fc38
2023-10-04 15:52:08
[SECURITY] Fedora 39 Update: glibc-2.38-6.fc39
2023-10-04 17:16:19
rocky
rocky
glibc security update
2023-10-06 22:57:06
rosalinux
rosalinux
Advisory ROSA-SA-2024-2332
2024-01-30 08:26:13
gentoo
gentoo
glibc: Multiple vulnerabilities
2023-10-04 00:00:00
almalinux
almalinux
Important: glibc security update
2023-10-05 00:00:00
Important: glibc security update
2023-10-05 00:00:00
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.9%

JSON
Related for NVD:CVE-2023-4806
debiancve2cbl_mariner1ibm9nessus37openvas22redhatcve2osv7cvelist2prion2cve2ubuntucve2mageia2redhat76photon3nvd1cloudfoundry2ubuntu2debian1oraclelinux4fedora3rocky1rosalinux1gentoo1almalinux2hp2oracle1ics1