Vulnerability · Published Sep 18, 2023 · Assigned by redhat

CVE-2023-4806Glibc: potential use-after-free in getaddrinfo()

Medium 5.9

In plain English

A medium-severity use-after-free in Red Hat Enterprise Linux 6 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 76% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)1.6%top 24.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8compat-libpthread-nonshared2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:8glibc2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-all-langpacks2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-all-langpacks2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-benchtests2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-benchtests2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-common2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-common2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-devel2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-devel2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-doc2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-doc2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-gconv-extra2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-gconv-extra2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-headers2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-headers2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-aa2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-aa2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-af2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-af2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-agr2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-agr2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ak2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ak2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-am2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-am2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-an2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-an2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-anp2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-anp2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ar2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ar2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-as2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-as2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ast2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ast2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ayc2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ayc2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-az2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-az2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-be2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-be2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-bem2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-bem2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ber2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ber2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-bg2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-bg2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-bhb2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-bhb2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-bho2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-bho2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-bi2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-bi2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-bn2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-bn2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-bo2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-bo2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-br2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-br2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-brx2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-brx2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-bs2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-bs2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-byn2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-byn2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ca2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ca2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ce2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ce2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-chr2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-chr2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:9glibc-langpack-ckb2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-cmn2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-cmn2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-crh2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-crh2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-cs2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-cs2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-csb2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-csb2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-cv2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-cv2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-cy2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-cy2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-da2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-da2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-de2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-de2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-doi2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-doi2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-dsb2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-dsb2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-dv2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-dv2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-dz2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-dz2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-el2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-el2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-en2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-en2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-eo2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-eo2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-es2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-es2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-et2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-et2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-eu2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-eu2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-fa2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-fa2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ff2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ff2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-fi2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-fi2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-fil2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-fil2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-fo2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-fo2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-fr2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-fr2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-fur2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-fur2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-fy2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-fy2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ga2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ga2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-gd2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-gd2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-gez2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-gez2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-gl2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-gl2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-gu2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-gu2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-gv2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-gv2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ha2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ha2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-hak2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-hak2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-he2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-he2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-hi2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-hi2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-hif2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-hif2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-hne2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-hne2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-hr2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-hr2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-hsb2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-hsb2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ht2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ht2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-hu2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-hu2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-hy2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-hy2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ia2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ia2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-id2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-id2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ig2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ig2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ik2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ik2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-is2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-is2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-it2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-it2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-iu2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-iu2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ja2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ja2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ka2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ka2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-kab2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-kab2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-kk2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-kk2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-kl2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-kl2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-km2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-km2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-kn2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-kn2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ko2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ko2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-kok2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-kok2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ks2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ks2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ku2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ku2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-kw2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-kw2.34-60.el9_2.7ALSA-2023:5453
AlmaLinux:8glibc-langpack-ky2.28-225.el8_8.6ALSA-2023:5455
AlmaLinux:9glibc-langpack-ky2.34-60.el9_2.7ALSA-2023:5453

Affected products (as reported)

Weakness: CWE-416 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References