CVE-2023-4527

MEDIUM

MEDIUM Priority: 0.11 BB Relevance: 63/100

Published: 2023-09-18 Modified: 2026-11-07 First seen: 2026-11-07 Status: active

Attack Surface

Network No Auth No Interaction

CVSS Vector Breakdown

AV: Network

AC: High

PR: None

UI: None

S: Unchanged

C: Low

I: None

A: High

Description

A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash.

Weakness Classification (2)

CWE-121 — Stack-based Buffer Overflow CWE-125

Affected Software (33)

Vendor	Product	Version
fedoraproject	fedora	37
fedoraproject	fedora	38
fedoraproject	fedora	39
gnu	glibc	2.36 – 2.36.113
netapp	h300s_firmware	-
netapp	h410c_firmware	-
netapp	h410s_firmware	-
netapp	h500s_firmware	-
netapp	h700s_firmware	-
redhat	codeready_linux_builder_eus	9.2
redhat	codeready_linux_builder_eus_for_power_little_endian	9.0_ppc64le
redhat	codeready_linux_builder_eus_for_power_little_endian_eus	9.2_ppc64le
redhat	codeready_linux_builder_for_arm64	9.0_aarch64
redhat	codeready_linux_builder_for_arm64_eus	9.2_aarch64
redhat	codeready_linux_builder_for_ibm_z_systems	9.0_s390x
redhat	codeready_linux_builder_for_ibm_z_systems_eus	9.2_s390x
redhat	enterprise_linux	8.0
redhat	enterprise_linux	9.0
redhat	enterprise_linux_eus	8.8
redhat	enterprise_linux_eus	9.2
redhat	enterprise_linux_for_arm_64	9.0_aarch64
redhat	enterprise_linux_for_arm_64_eus	9.2_aarch64
redhat	enterprise_linux_for_ibm_z_systems	8.0_s390x
redhat	enterprise_linux_for_ibm_z_systems_eus	8.8_s390x
redhat	enterprise_linux_for_ibm_z_systems_eus_s390x	9.2
redhat	enterprise_linux_for_ibm_z_systems_s390x	9.2
redhat	enterprise_linux_for_power_little_endian	8.0_ppc64le
redhat	enterprise_linux_for_power_little_endian	9.2_ppc64le
redhat	enterprise_linux_for_power_little_endian_eus	8.8_ppc64le
redhat	enterprise_linux_for_power_little_endian_eus	9.2_ppc64le