REDHAT-BUG-1175369: Low severity gnu c library (glibc) vulnerability
It was reported [1] that getnetbyname function in glibc 2.21 in earlier will enter an infinite loop if the DNS backend is activated in the system Name Service Switch configuration, and the DNS resolver receives a positive answer while processing the network name.
Upstream commit that fixes this issue: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=11e3417af6e354f1942c68a271ae51e892b2814d
[1]: https://sourceware.org/bugzilla/showbug.cgi?id=17630
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1175369?
The severity of REDHAT-BUG-1175369 is critical due to the potential for an infinite loop in the getnetbyname function affecting system responsiveness.
How do I fix REDHAT-BUG-1175369?
To fix REDHAT-BUG-1175369, upgrade your GNU glibc version to a later version than 2.21 where the issue has been resolved.
What software is affected by REDHAT-BUG-1175369?
REDHAT-BUG-1175369 affects GNU glibc versions earlier than 2.21.
What causes the issue in REDHAT-BUG-1175369?
The issue in REDHAT-BUG-1175369 is caused by the getnetbyname function entering an infinite loop when the DNS backend is activated and a positive DNS response is received.
Is there a workaround for REDHAT-BUG-1175369 if I cannot upgrade?
A potential workaround for REDHAT-BUG-1175369 is to disable the DNS backend in the Name Service Switch configuration.