CVE-2013-4458: Buffer Overflow
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.18 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of AFINET6 address results. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1914.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4458?
CVE-2013-4458 has a high severity level as it can lead to denial of service through a stack-based buffer overflow.
How do I fix CVE-2013-4458?
To fix CVE-2013-4458, you should upgrade to a patched version of the GNU C Library that is newer than version 2.18.
Which versions of glibc are affected by CVE-2013-4458?
CVE-2013-4458 affects GNU C Library (glibc) versions 2.18 and earlier.
Is CVE-2013-4458 exploitable remotely?
Yes, CVE-2013-4458 can be exploited remotely by attackers using a specially crafted hostname or IP address.
What impact does CVE-2013-4458 have on systems?
The impact of CVE-2013-4458 is that it may cause systems to crash, resulting in denial of service.