CVE-2013-4458
Fixed in a distro release EPSS 4%
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.18 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of AF_INET6 address results. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1914.
Products: gnu glibc, suse linux_enterprise_debuginfo, suse linux_enterprise_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | glibc | 2.18-1 |
| Debian 13 | glibc | 2.18-1 |
| Debian 14 | glibc | 2.18-1 |
| Debian 6.0 | eglibc | 2.11.3-4+deb6u5 |
| Red Hat Enterprise Linux 6 | glibc | 0:2.12-1.149.el6 |
| Red Hat Enterprise Linux 6 | glibc-common | 0:2.12-1.149.el6 |
| Red Hat Enterprise Linux 6 | glibc-debuginfo | 0:2.12-1.149.el6 |
| Red Hat Enterprise Linux 6 | glibc-debuginfo-common | 0:2.12-1.149.el6 |
| Red Hat Enterprise Linux 6 | glibc-devel | 0:2.12-1.149.el6 |
| Red Hat Enterprise Linux 6 | glibc-headers | 0:2.12-1.149.el6 |
| Red Hat Enterprise Linux 6 | glibc-static | 0:2.12-1.149.el6 |
| Red Hat Enterprise Linux 6 | glibc-utils | 0:2.12-1.149.el6 |
| Red Hat Enterprise Linux 6 | nscd | 0:2.12-1.149.el6 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | glibc | 2.11.3-17.45.66.1 |
| Ubuntu 14.04 LTS | eglibc | 2.19-0ubuntu6.1 |
| openSUSE Tumbleweed | glibc | 2.24-2.3 |