Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-0915

getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler

Description

Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The GNU C Library glibc

Default version status: unaffected

  • 2.0 to ≤ 2.42affected

References