Medium severity6.5NVD Advisory· Published Sep 18, 2023· Updated May 12, 2026
CVE-2023-4527
CVE-2023-4527
Description
A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash.
Affected products
4- Red Hat/Red Hat Enterprise Linux 9v5cpe:/a:redhat:enterprise_linux:9::appstreamRange: 0:2.34-60.el9_2.7
- Red Hat/Red Hat Enterprise Linux 6v5cpe:/o:redhat:enterprise_linux:6
- Red Hat/Red Hat Enterprise Linux 7v5cpe:/o:redhat:enterprise_linux:7
- Red Hat/Red Hat Enterprise Linux 8v5cpe:/o:redhat:enterprise_linux:8::baseosRange: 0:2.28-225.el8_8.6
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
12- bugzilla.redhat.com/show_bug.cginvdExploitIssue TrackingThird Party Advisory
- www.openwall.com/lists/oss-security/2023/09/25/1nvdMailing ListThird Party Advisory
- access.redhat.com/errata/RHSA-2023:5453nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2023:5455nvdThird Party Advisory
- access.redhat.com/security/cve/CVE-2023-4527nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/nvdMailing ListThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/nvdMailing ListThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/nvdMailing ListThird Party Advisory
- security.gentoo.org/glsa/202310-03nvdThird Party Advisory
- security.netapp.com/advisory/ntap-20231116-0012/nvdThird Party Advisory
- cert-portal.siemens.com/productcert/html/ssa-082556.htmlnvd
- cert-portal.siemens.com/productcert/html/ssa-831302.htmlnvd
News mentions
0No linked articles in our index yet.