Published: 26/08/2015 Updated: 07/11/2023

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 454

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

The getaddrinfo function in glibc prior to 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent malicious users to cause a denial of service (invalid free) and possibly execute arbitrary code via unspecified vectors, as demonstrated by an internationalized domain name to ping6.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu glibc

Several vulnerabilities have been fixed in eglibc, Debian's version of the GNU C library: CVE-2012-3406 The vfprintf function in stdio-common/vfprintfc in GNU C Library (aka glibc) 25, 212, and probably other versions does not properly restrict the use of the alloca function when allocating the SPECS array, which allows context- ...

Debian Bug report logs - #777197 glibc: CVE-2015-1472 CVE-2015-1473 Package: glibc; Maintainer for glibc is GNU Libc Maintainers <debian-glibc@listsdebianorg>; Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Fri, 6 Feb 2015 07:51:02 UTC Severity: grave Tags: security Fixed in versions glibc/219-15, eglibc ...

Debian Bug report logs - #775572 glibc: CVE-2014-7817 CVE-2014-9402 Package: src:glibc; Maintainer for src:glibc is GNU Libc Maintainers <debian-glibc@listsdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Sat, 17 Jan 2015 14:42:02 UTC Severity: important Tags: security Found in version glibc/219 ...

Debian Bug report logs - #681888 CVE-2012-3406: glibc formatted printing vulnerabilities Package: src:glibc; Maintainer for src:glibc is GNU Libc Maintainers <debian-glibc@listsdebianorg>; Reported by: Moritz Muehlenhoff <muehlenhoff@univentionde> Date: Fri, 13 Jul 2012 13:42:15 UTC Severity: important Tags: secur ...

An invalid free flaw was found in glibc's getaddrinfo() function when used with the AI_IDN flag A remote attacker able to make an application call this function could use this flaw to execute arbitrary code with the permissions of the user running the application Note that this flaw only affected applications using glibc compiled with libidn supp ...

CWE-17 http://rhn.redhat.com/errata/RHSA-2015-1627.html https://bugzilla.redhat.com/show_bug.cgi?id=981942 http://www.openwall.com/lists/oss-security/2015/01/29/21 https://bugzilla.redhat.com/show_bug.cgi?id=1186614 https://sourceware.org/bugzilla/show_bug.cgi?id=18011 http://www.securityfocus.com/bid/72710 https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commitdiff%3Bh=2e96f1c7 https://nvd.nist.gov https://www.debian.org/security/./dsa-3169 https://access.redhat.com/security/cve/cve-2013-7424

CVE-2013-7424

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect