REDHAT-BUG-1165192: Low severity gnu c library (glibc) vulnerability
IssueDescription:
The "files" backend for the Name Service Switch (NSS) in glibc does not properly isolate iteration over the entire database from key-based lookups. As a result, an application which performs lookups on a database while iterating over it could enter an infinite loop, leading to a denial of service.
Acknowledgements:
This issue was discovered by Robin Hack of Red Hat.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1165192?
The severity of REDHAT-BUG-1165192 is considered critical due to the potential for infinite loops in applications.
How do I fix REDHAT-BUG-1165192?
To fix REDHAT-BUG-1165192, users should update to the latest patched version of GNU glibc.
What applications are affected by REDHAT-BUG-1165192?
Applications that utilize the 'files' backend for Name Service Switch (NSS) in GNU glibc may be affected by REDHAT-BUG-1165192.
Can REDHAT-BUG-1165192 lead to Denial of Service?
Yes, REDHAT-BUG-1165192 can lead to a Denial of Service due to applications potentially entering infinite loops.
When was REDHAT-BUG-1165192 reported?
REDHAT-BUG-1165192 was reported in 2023.