PT-2023-5341

CVE-2023-4813

·

Published

2022-03-01

·

Updated

2026-10-14

Description by

CVSS 2.0
7.6
High
MetricsAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions glibc (affected versions not specified)
Description A flaw was found in glibc, where the gaih inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge. The issue can be exploited by a remote attacker to cause a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2023:5453
ALSA-2023:5455
AZL-28829
CESA-2023_5455
OESA-2023-1688
OPENSUSE-SU-2024:13388-1
RHSA-2023:5453
RHSA-2023_5453
RHSA-2023:5455
RHSA-2023_5455
RHSA-2023:7409
RLSA-2023:5455
ROSA-SA-2025-2637
SUSE-RU-2023:4063-1
SUSE-SU-2023:4047-1
SUSE-SU-2023_4047-1
SUSE-SU-2023:4110-1
SUSE-SU-2023_4110-1
USN-6541-1
USN-6541-2
Found an issue in the description? Have something to add? Feel free to write us 👾