What’s Vulnerable › Vulnerabilities
CVE-2023-4527: Glibc: stack read overflow in getaddrinfo in no-aaaa mode
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.7% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2023-09-18 · updated 2026-06-17
- Weakness: CWE-121
Description
A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash.
Affected products
- Fedoraproject Fedora: 37, 38, 39
- GNU C Library (glibc): from 2.36 before 2.36.113; from 2.37 before 2.37.38; from 2.38 before 2.38.19 — fixed in 2.36.113, 2.37.38, 2.38.19
- NetApp H300S Firmware: all versions
- NetApp H410C Firmware: all versions
- NetApp H410S Firmware: all versions
- NetApp H500S Firmware: all versions
- NetApp H700S Firmware: all versions
- RedHat Codeready Linux Builder Eus: 9.2
- RedHat Codeready Linux Builder Eus For Power Little Endian: 9.0_ppc64le
- RedHat Codeready Linux Builder Eus For Power Little Endian Eus: 9.2_ppc64le
- RedHat Codeready Linux Builder For Arm64: 9.0_aarch64
- RedHat Codeready Linux Builder For Arm64 Eus: 9.2_aarch64
- RedHat Codeready Linux Builder For Ibm Z Systems: 9.0_s390x
- RedHat Codeready Linux Builder For Ibm Z Systems Eus: 9.2_s390x
- Red Hat Enterprise Linux: 8.0, 9.0
- RedHat Enterprise Linux Eus: 8.8, 9.2
- RedHat Enterprise Linux For Arm 64: 9.0_aarch64
- RedHat Enterprise Linux For Arm 64 Eus: 9.2_aarch64
- RedHat Enterprise Linux For Ibm Z Systems: 8.0_s390x
- RedHat Enterprise Linux For Ibm Z Systems Eus: 8.8_s390x
- RedHat Enterprise Linux For Ibm Z Systems Eus S390X: 9.2
- RedHat Enterprise Linux For Ibm Z Systems S390X: 9.2
- RedHat Enterprise Linux For Power Little Endian: 8.0_ppc64le, 9.2_ppc64le
- RedHat Enterprise Linux For Power Little Endian Eus: 8.8_ppc64le, 9.2_ppc64le
- RedHat Enterprise Linux Server Aus: 9.2
- RedHat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions: 9.2_ppc64le
- RedHat Enterprise Linux Tus: 8.8
How to fix
Upgrade to a fixed version: GNU C Library (glibc) 2.36.113, 2.37.38, 2.38.19. Check the vendor advisory for mitigations.
References
- https://access.redhat.com/errata/RHSA-2023:5453
- https://access.redhat.com/errata/RHSA-2023:5455
- https://access.redhat.com/security/cve/CVE-2023-4527
- https://bugzilla.redhat.com/show_bug.cgi?id=2234712
- http://www.openwall.com/lists/oss-security/2023/09/25/1
- https://access.redhat.com/errata/RHSA-2023:5453
- https://access.redhat.com/errata/RHSA-2023:5455
- https://access.redhat.com/security/cve/CVE-2023-4527
- https://bugzilla.redhat.com/show_bug.cgi?id=2234712
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/
Get alerted when CVE-2023-4527 or the next vulnerability affects your stack