PT-2023-5665 · Glibc+6 · Glibc+6

Florian Weimer + 1 · Published 2023-09-12 · Updated 2026-05-12 · CVE-2023-4527

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions glibc (affected versions not specified)

Description A flaw was found in glibc. When the getaddrinfo function is called with the AF UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash. The issue is related to reading data beyond the buffer boundaries in memory, which can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Out of bounds Read

Weakness Enumeration

CWE-121

CWE-125

Related Identifiers

ALSA-2023:5453

ALSA-2023:5455

AZL-34732

BDU:2023-06332

CESA-2023_5455

CVE-2023-4527

DSA-5514-1

MGASA-2023-0270

OPENSUSE-SU-2024:13273-1

RHSA-2023:5453

RHSA-2023:5455

RHSA-2023_5453

RHSA-2023_5455

RLSA-2023:5455

USN-6409-1

Affected Products

Almalinux

Centos

Linuxmint

Red Hat

Rocky Linux

Ubuntu

Glibc

References · 67

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=2234712 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-4527 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-4527 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4911 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-4527 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0270.html · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-4527 · Security Note
• https://errata.almalinux.org/9/ALSA-2023-5453.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2023:5455 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13273-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4527 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-4527 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-34732 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-5453.html · Vendor Advisory