CVE-2013-4458

Name of the Vulnerable Software and Affected Versions GNU C Library (aka glibc or libc6) versions 2.18 and earlier

Description The issue is a stack-based buffer overflow in the getaddrinfo function, which can be triggered by a hostname or IP address that results in a large number of AF INET6 address results, allowing remote attackers to cause a denial of service (crash). This problem exists due to an incomplete fix for a previous issue.

Recommendations For GNU C Library (aka glibc or libc6) versions 2.18 and earlier, consider updating to a version that includes a complete fix for this issue. As a temporary workaround, restrict the use of the getaddrinfo function to minimize the risk of exploitation. Avoid using hostnames or IP addresses that may trigger a large number of AF INET6 address results until the issue is resolved.