102 matches found
GNU C Library security vulnerabilities
The GNU C Library is an open-source, free C programming language library published by the GNU community under the LGPL license. Versions of the GNU C Library 2.34 to 2.43 contain security vulnerabilities. These vulnerabilities arise from the gethostbyaddr or gethostbyaddrr functions potentially...
Linux Distros Unpatched Vulnerability : CVE-2026-4437
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2....
CVE-2026-4437: Out-of-bounds Read
Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the...
CVE-2026-4438: Improper Input Validation
Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification...
GNU C Library security vulnerabilities
The GNU C Library is an open-source, free C programming language library published by the GNU community under the LGPL license. Versions of the GNU C Library 2.34 to 2.43 contained security vulnerabilities. These vulnerabilities occurred because the gethostbyaddr or gethostbyaddrr functions might...
PT-2026-26671
Name of the Vulnerable Software and Affected Versions GNU C library versions 2.34 through 2.43 Description The GNU C library’s gethostbyaddr and gethostbyaddr r functions, when used with a configured nsswitch.conf file specifying the library’s DNS backend, may return invalid DNS hostnames. This...
PT-2026-26670
Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.34 through 2.43 Description The GNU C Library contains a flaw where calling the gethostbyaddr or gethostbyaddr r functions with a specific nsswitch.conf configuration utilizing the library’s DNS backend may lead to a...
PT-2026-67337
Name of the Vulnerable Software and Affected Versions SSSD affected versions not specified Description A flaw exists in the NSS responder where the sss nss protocol parse addr function fails to validate the addrlen field against the remaining packet body size. A local attacker can exploit this by...
EUVD-2001-0207
Malware in sbrugna...
EUVD-2020-15190
Malware in sbrugna...
CVE-2020-22429
redox-os v0.1.0 was discovered to contain a use-after-free bug via the gethostbyaddr function at /src/header/netdb/mod.rs...
CVE-2025-1329
IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyaddr function...
CVE-2025-1329
IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyaddr function...
CVE-2025-1329: Out-of-bounds Write
IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS return requests by the gethostbyaddr function...
IBM CICS TX Standard buffer error vulnerability
IBM CICS TX Standard is a comprehensive single transaction runtime package from International Business Machines IBM, Inc. It can provide a cloud-native deployment model for standalone applications. A buffer error vulnerability exists in IBM CICS TX Standard version 11.1, which stems from the...
CVE-2020-22429
redox-os v0.1.0 was discovered to contain a use-after-free bug via the gethostbyaddr function at /src/header/netdb/mod.rs...
CVE-2020-22429
redox-os v0.1.0 was discovered to contain a use-after-free bug via the gethostbyaddr function at /src/header/netdb/mod.rs...
Design/Logic Flaw
redox-os v0.1.0 was discovered to contain a use-after-free bug via the gethostbyaddr function at /src/header/netdb/mod.rs...
CVE-2020-22429
CVE-2020-22429 affects redox-os v0.1.0 and describes a use-after-free in the gethostbyaddr() path located at /src/header/netdb/mod.rs. The vulnerability is classified with a high impact (CVSS 3.1: AV=L/AC=L/PR=L/UI=N/S=U/C/H/I/H/A) and is labeled as a local, low-privilege issue with no user inter...
