CVE-2023-4806

Name of the Vulnerable Software and Affected Versions glibc (affected versions not specified)

Description A flaw was found in glibc, where the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the nss * gethostbyname2 r and nss * getcanonname r hooks without implementing the nss * gethostbyname3 r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF INET6 address family with AI CANONNAME, AI ALL, and AI V4MAPPED as flags.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.