PT-2023-5341 · Glibc+9 · Glibc+9

Guilherme De Almeida Suckevicz · Published 2022-03-01 · Updated 2026-01-21 · CVE-2023-4813

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions glibc (affected versions not specified)

Description A flaw was found in glibc, where the gaih inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge. The issue can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2023:5453

ALSA-2023:5455

AZL-28829

BDU:2023-05969

CESA-2023_5455

CVE-2023-4813

OESA-2023-1688

OPENSUSE-SU-2024:13388-1

RHSA-2023:5453

RHSA-2023:5455

RHSA-2023:7409

RHSA-2023_5453

RHSA-2023_5455

RLSA-2023:5455

ROSA-SA-2025-2637

SUSE-RU-2023:4063-1

SUSE-SU-2023:4047-1

SUSE-SU-2023:4110-1

SUSE-SU-2023_4047-1

SUSE-SU-2023_4110-1

USN-6541-1

USN-6541-2

Affected Products

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

Glibc

References · 70

• https://nvd.nist.gov/vuln/detail/CVE-2023-5156 · Security Note
• https://access.redhat.com/errata/RHSA-2023:7409 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2023:5455 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6541-1 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-5453.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6541-2 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2237798 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-4813 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4813 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-4813 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6541-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4806 · Security Note
• https://access.redhat.com/errata/RHSA-2023:5453 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4047-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1688 · Vendor Advisory