Published: 04/12/2018 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

In the GNU C Library (aka glibc or libc6) up to and including 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu glibc
fedoraproject fedora 28
fedoraproject fedora 29

Debian Bug report logs - #914837 glibc: CVE-2018-19591: Linux if_nametoindex() does not close descriptor Package: src:glibc; Maintainer for src:glibc is GNU Libc Maintainers <debian-glibc@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 27 Nov 2018 20:33:02 UTC Severity: important T ...

In the GNU C Library (aka glibc or libc6) through 228, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed This is related to the if_nametoindex() function(CVE-2018-19591) ...

In the GNU C Library (aka glibc or libc6) through 228, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed This is related to the if_nametoindex() function ...

A file descriptor leak has been found in glibc <= 228, in the if_nametoindex() function, when processing getaddrinfo() calls with crafted interface names ...

Critical Infrastructure Sectors: Critical Manufacturing

CWE-20 https://sourceware.org/bugzilla/show_bug.cgi?id=23927 http://www.securitytracker.com/id/1042174 http://www.securityfocus.com/bid/106037 https://security.gentoo.org/glsa/201903-09 https://security.netapp.com/advisory/ntap-20190321-0003/https://security.gentoo.org/glsa/201908-06 https://usn.ubuntu.com/4416-1/https://sourceware.org/git/?p=glibc.git%3Ba=blob_plain%3Bf=NEWS%3Bhb=HEAD https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BO7WHN52GFMC5F2I2232GFIPSSXWFV7G/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M52KE4YR3GNMHQUOS3DKAGZD5TQ5D5UH/https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commitdiff%3Bh=d527c860f5a3f0ed687bd03f0cb464612dc23408 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=914837 https://nvd.nist.gov https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-10 https://alas.aws.amazon.com/AL2/ALAS-2019-1140.html

CVE-2018-19591

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

References

Vulmon Search

About

Products

Connect