PT-2023-5341 · Glibc+9 · Glibc+9

Guilherme De Almeida Suckevicz · Publicado 2022-03-01 · Atualizado 2026-01-21 · CVE-2023-4813

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions glibc (affected versions not specified)

Description A flaw was found in glibc, where the gaih inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge. The issue can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALSA-2023:5453

ALSA-2023:5455

AZL-28829

BDU:2023-05969

CESA-2023_5455

CVE-2023-4813

OESA-2023-1688

OPENSUSE-SU-2024:13388-1

RHSA-2023:5453

RHSA-2023:5455

RHSA-2023:7409

RHSA-2023_5453

RHSA-2023_5455

RLSA-2023:5455

ROSA-SA-2025-2637

SUSE-RU-2023:4063-1

SUSE-SU-2023:4047-1

SUSE-SU-2023:4110-1

SUSE-SU-2023_4047-1

SUSE-SU-2023_4110-1

USN-6541-1

USN-6541-2

Produtos afetados

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

Glibc

Referências · 70

• https://suse.com/security/cve/CVE-2020-1751 · Nota
• https://suse.com/security/cve/CVE-2021-35942 · Nota
• https://twitter.com/CVEnew/status/1701727479915016632 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-5156 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2023:7409 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2023:5455 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-6541-1 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2023-4813 · Nota
• https://errata.almalinux.org/9/ALSA-2023-5453.html · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-6541-2 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2023/suse-su-20234047-1 · Nota
• https://bugzilla.suse.com/1215504 · Nota
• https://bugzilla.redhat.com/2238352 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=2237798 · Correção
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-4813 · Aviso do Fabricante