PT-2026-33850 · Gnu C Library · Glibc
Rahul Hoysala
·
Published
2026-04-20
·
Updated
2026-04-20
·
CVE-2026-5358
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
The obsolete nis local principal function in the GNU C Library version 2.43 and older may overflow a buffer in the data section, which could allow an attacker to spoof a crafted response to a UDP request generated by this function and overwrite neighboring static data in the requesting application.
NIS support is obsolete and has been deprecated in the GNU C Library since version 2.26 and is only maintained for legacy usage. Applications should port away from NIS to more modern identity and access management services.
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Glibc