REDHAT-BUG-1175369
First published: Wed Dec 17 2014(Updated: )
It was reported [1] that getnetbyname function in glibc 2.21 in earlier will enter an infinite loop if the DNS backend is activated in the system Name Service Switch configuration, and the DNS resolver receives a positive answer while processing the network name. Upstream commit that fixes this issue: <a href="https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=11e3417af6e354f1942c68a271ae51e892b2814d">https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=11e3417af6e354f1942c68a271ae51e892b2814d</a> [1]: <a href="https://sourceware.org/bugzilla/show_bug.cgi?id=17630">https://sourceware.org/bugzilla/show_bug.cgi?id=17630</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNU C Library (glibc) | <2.21 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=11e3417af6e354f1942c68a271ae51e892b2814d
- https://sourceware.org/bugzilla/show_bug.cgi?id=17630
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1175370
- https://access.redhat.com/security/cve/CVE-2014-9402
- http://seclists.org/oss-sec/2014/q4/1080
- https://access.redhat.com/security/updates/classification/
- https://access.redhat.com/errata/RHSA-2018:0805
- https://bugzilla.redhat.com/show_bug.cgi?id=1175369
Frequently Asked Questions
What is the severity of REDHAT-BUG-1175369?
The severity of REDHAT-BUG-1175369 is critical due to the potential for an infinite loop in the getnetbyname function affecting system responsiveness.
How do I fix REDHAT-BUG-1175369?
To fix REDHAT-BUG-1175369, upgrade your GNU glibc version to a later version than 2.21 where the issue has been resolved.
What software is affected by REDHAT-BUG-1175369?
REDHAT-BUG-1175369 affects GNU glibc versions earlier than 2.21.
What causes the issue in REDHAT-BUG-1175369?
The issue in REDHAT-BUG-1175369 is caused by the getnetbyname function entering an infinite loop when the DNS backend is activated and a positive DNS response is received.
Is there a workaround for REDHAT-BUG-1175369 if I cannot upgrade?
A potential workaround for REDHAT-BUG-1175369 is to disable the DNS backend in the Name Service Switch configuration.
- agent/references
- agent/type
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2014-9402
- agent/last-modified-date
- agent/first-publish-date
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/gnu
- canonical/gnu c library (glibc)