Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

102 matches found

NVD
NVD•added 2026/03/20 8:16 p.m.•15 views

CVE-2026-4437

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the...

7.5CVSS0.00338EPSS
SaveExploits1References2
NVD
NVD•added 2026/03/20 8:16 p.m.•19 views

CVE-2026-4438

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification...

5.4CVSS0.00332EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu•added 2026/03/20 8:16 p.m.•16 views

UBUNTU-CVE-2026-4437

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the...

7.5CVSS7.5AI score0.00338EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu•added 2026/03/20 8:16 p.m.•20 views

UBUNTU-CVE-2026-4438

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification...

5.4CVSS6.5AI score0.00332EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve•added 2026/03/20 8:16 p.m.•12 views

CVE-2026-4437

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the...

7.5CVSS7.5AI score0.00338EPSS
SaveExploits1References3
Cvelist
Cvelist•added 2026/03/20 7:59 p.m.•64 views

CVE-2026-4438 gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification...

0.00332EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment•added 2026/03/20 7:59 p.m.•9 views

CVE-2026-4438 gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification...

6.5AI score0.00332EPSS
SaveExploits1References1
Mend
Mend•added 2026/03/20 7:59 p.m.•7 views

CVE-2026-4438

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification...

5.4CVSS6.5AI score0.00332EPSS
SaveExploits1References4
attackerkb
attackerkb•added 2026/03/20 7:59 p.m.•25 views

CVE-2026-4438

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification...

6.6AI score0.00332EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE•added 2026/03/20 7:59 p.m.•17 views

CVE-2026-4438

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification...

5.4CVSS6.5AI score0.00332EPSS
SaveExploits1
osv_cve
osv_cve•added 2026/03/20 7:59 p.m.•16 views

CVE-2026-4438 gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification...

5.4CVSS5.9AI score
SaveExploits0References4
CVE
CVE•added 2026/03/20 7:59 p.m.•92 views

CVE-2026-4438

The GNU C Library (glibc) , specifically versions 2.34 to 2.43 , is vulnerable to an issue where calling the gethostbyaddr or gethostbyaddr_r functions with a configured nsswitch.conf specifying the library's DNS backend can result in an invalid DNS hostname being returned. This behavior violates...

5.4CVSS6.5AI score0.00332EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist•added 2026/03/20 7:59 p.m.•67 views

CVE-2026-4437 gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the...

0.00338EPSS
SaveExploits1References1
attackerkb
attackerkb•added 2026/03/20 7:59 p.m.•60 views

CVE-2026-4437

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the...

7.6AI score0.00338EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment•added 2026/03/20 7:59 p.m.•9 views

CVE-2026-4437 gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the...

7.5AI score0.00338EPSS
SaveExploits1References1
Mend
Mend•added 2026/03/20 7:59 p.m.•6 views

CVE-2026-4437

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the...

8.7CVSS7.5AI score0.00338EPSS
SaveExploits1References4
Debian CVE
Debian CVE•added 2026/03/20 7:59 p.m.•20 views

CVE-2026-4437

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the...

7.5CVSS7.5AI score0.00338EPSS
SaveExploits1
CVE
CVE•added 2026/03/20 7:59 p.m.•109 views

CVE-2026-4437

The GNU C Library (glibc) versions 2.34 to 2.43 are affected by a vulnerability where calling gethostbyaddr or gethostbyaddr_r with a specific nsswitch.conf configuration can lead to a DNS specification violation . A crafted response from a configured DNS server can cause the application to incor...

7.5CVSS7.5AI score0.00338EPSS
SaveExploits1References2Affected Software1
osv_cve
osv_cve•added 2026/03/20 7:59 p.m.•19 views

CVE-2026-4437 gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response

Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the...

7.5CVSS5.9AI score
SaveExploits0References4
CNNVD
CNNVD•added 2026/03/20 12:00 a.m.•24 views

GNU C Library security vulnerabilities

The GNU C Library is an open-source, free C programming language library published by the GNU community under the LGPL license. Versions of the GNU C Library 2.34 to 2.43 contain security vulnerabilities. These vulnerabilities arise from the gethostbyaddr or gethostbyaddrr functions potentially...

5.4CVSS6.7AI score0.00332EPSS
SaveExploits1References2
Rows per page
Query Builder