Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.6
CVSSv2

CVE-2016-10739

Published: 21/01/2019 Updated: 06/08/2019
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 5.3 | Impact Score: 3.4 | Exploitability Score: 1.8
VMScore: 410
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Glibc

Vulnerability Summary

In the GNU C Library (aka glibc or libc6) up to and including 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the possibility of embedded HTTP headers or other potentially dangerous substrings.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gnu glibc

opensuse leap 15.0

Vendor Advisories

Debian CVElist Bug Report Logs: glibc: CVE-2016-10739: getaddrinfo should reject IP addresses with trailing characters
Debian Bug report logs - #920047 glibc: CVE-2016-10739: getaddrinfo should reject IP addresses with trailing characters Package: src:glibc; Maintainer for src:glibc is GNU Libc Maintainers <debian-glibc@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 21 Jan 2019 20:54:04 UTC Severi ...
Red Hat: Moderate: glibc security and bug fix update
Synopsis Moderate: glibc security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for glibc is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base s ...
Red Hat: Moderate: glibc security, bug fix, and enhancement update
Synopsis Moderate: glibc security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for glibc is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System ...
Red Hat: Moderate: OpenShift Container Platform 4.6.1 image security update
Synopsis Moderate: OpenShift Container Platform 461 image security update Type/Severity Security Advisory: Moderate Topic An update is now available for Red Hat OpenShift Container Platform 46Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability S ...
Amazon Linux 2: ALAS2-2020-1517
In the GNU C Library (aka glibc or libc6) through 228, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the possibility of embedded HTTP headers or other potentiall ...
Amazon Linux AMI: ALAS-2019-1320
In the GNU C Library (aka glibc or libc6) through 228, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the possibility of embedded HTTP headers or other potentiall ...
Arch Linux Issues:
In the GNU C Library (aka glibc or libc6) through 228, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the possibility of embedded HTTP headers or other potentiall ...

ICS Advisories

https://ics-cert.us-cert.gov/advisories/fd87a3fc00e025fdc5034360097d2bdf
Critical Infrastructure Sectors: Critical Manufacturing

Github Repositories

https://github.com/xlloss/meta-timesys

imx yocto30

What is meta-timesys? This Yocto layer provides scripts for image manifest generation used for security monitoring and notification as part of the Timesys Vigiles product offering What is Vigiles? Vigiles is a vulnerability management tool that provides build-time Yocto CVE Analysis of target images It does this by collecting metadata about packages to be installed and upload

https://github.com/TimesysGit/meta-timesys

Vulnerability management tool that provides Yocto SBOM generation and CVE Analysis of target images.

What is meta-timesys? This Yocto layer provides scripts for image manifest generation used for security monitoring and notification as part of the Timesys Vigiles product offering What is Vigiles? Vigiles is a vulnerability management tool that provides build-time Yocto CVE Analysis of target images It does this by collecting metadata about packages to be installed and upload

https://github.com/siva7080/meta-timesys

What is meta-timesys? This Yocto layer provides scripts for image manifest generation used for security monitoring and notification as part of the Timesys Vigiles product offering What is Vigiles? Vigiles is a vulnerability management tool that provides build-time Yocto CVE Analysis of target images It does this by collecting metadata about packages to be installed and upload

https://github.com/renren82/timesys

What is meta-timesys? This Yocto layer provides scripts for image manifest generation used for security monitoring and notification as part of the Timesys Vigiles product offering What is Vigiles? Vigiles is a vulnerability management tool that provides build-time Yocto CVE Analysis of target images It does this by collecting metadata about packages to be installed and upload

References

CWE-20https://sourceware.org/bugzilla/show_bug.cgi?id=20018https://bugzilla.redhat.com/show_bug.cgi?id=1347549http://www.securityfocus.com/bid/106672http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00082.htmlhttps://access.redhat.com/errata/RHSA-2019:2118https://access.redhat.com/errata/RHSA-2019:3513https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920047https://nvd.nist.govhttps://github.com/xlloss/meta-timesyshttps://www.cisa.gov/news-events/ics-advisories/icsa-23-348-10https://alas.aws.amazon.com/AL2/ALAS-2020-1517.html
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-38028CVE-2024-32406CVE-2024-25624IMAPCVE-2024-2310CVE-2024-0874CVE-2024-20359XXEremote code execution
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook