Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2023-4813

Glibc: potential use-after-free in gaih_inet()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:2.28-225.el8_8.6 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:2.28-225.el8_8.6 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support

Default version status: affected

  • 0:2.28-189.8.el8_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:2.34-100.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:2.34-60.el9_2.7 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:2.34-100.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:2.34-60.el9_2.7 to < *unaffected

Red Hat Red Hat Virtualization 4 for Red Hat Enterprise Linux 8

Default version status: affected

  • 0:2.28-189.8.el8_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: affected

Red Hat Red Hat Enterprise Linux 7

Default version status: affected

References