Vulnerability · Published Sep 18, 2023 · Assigned by redhat

CVE-2023-4527Glibc: stack read overflow in getaddrinfo in no-aaaa mode

Medium 6.5

In plain English

A medium-severity stack buffer overflow in Red Hat Enterprise Linux 6 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 77% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)1.7%top 23.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8compat-libpthread-nonshared2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:8glibc2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-all-langpacks2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-all-langpacks2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-benchtests2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-benchtests2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-common2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-common2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-devel2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-devel2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-doc2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-doc2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-gconv-extra2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-gconv-extra2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-headers2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-headers2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-aa2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-aa2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-af2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-af2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-agr2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-agr2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ak2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ak2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-am2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-am2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-an2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-an2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-anp2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-anp2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ar2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ar2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-as2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-as2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ast2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ast2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ayc2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ayc2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-az2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-az2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-be2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-be2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-bem2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-bem2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ber2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ber2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-bg2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-bg2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-bhb2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-bhb2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-bho2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-bho2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-bi2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-bi2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-bn2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-bn2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-bo2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-bo2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-br2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-br2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-brx2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-brx2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-bs2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-bs2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-byn2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-byn2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ca2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ca2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ce2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ce2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-chr2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-chr2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:9glibc-langpack-ckb2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-cmn2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-cmn2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-crh2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-crh2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-cs2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-cs2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-csb2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-csb2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-cv2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-cv2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-cy2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-cy2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-da2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-da2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-de2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-de2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-doi2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-doi2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-dsb2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-dsb2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-dv2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-dv2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-dz2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-dz2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-el2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-el2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-en2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-en2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-eo2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-eo2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-es2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-es2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-et2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-et2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-eu2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-eu2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-fa2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-fa2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ff2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ff2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-fi2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-fi2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-fil2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-fil2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-fo2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-fo2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-fr2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-fr2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-fur2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-fur2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-fy2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-fy2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ga2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ga2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-gd2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-gd2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-gez2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-gez2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-gl2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-gl2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-gu2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-gu2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-gv2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-gv2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ha2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ha2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-hak2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-hak2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-he2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-he2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-hi2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-hi2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-hif2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-hif2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-hne2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-hne2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-hr2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-hr2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-hsb2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-hsb2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ht2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ht2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-hu2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-hu2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-hy2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-hy2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ia2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ia2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-id2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-id2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ig2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ig2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ik2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ik2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-is2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-is2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-it2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-it2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-iu2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-iu2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ja2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ja2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ka2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ka2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-kab2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-kab2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-kk2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-kk2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-kl2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-kl2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-km2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-km2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-kn2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-kn2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ko2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ko2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-kok2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-kok2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ks2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ks2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ku2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ku2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-kw2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-kw2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ky2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ky2.34-60.el9_2.7ALSA-2023:5453

Affected products (as reported)

Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H

References