REDHAT-BUG-2234712: Medium severity GNU glibc vulnerability
If the system is configured in no-aaaa mode via /etc/resolv.conf, getaddrinfo is called for the AFUNSPEC address family, and a DNS response is received over TCP that is larger than 2048 bytes, getaddrinfo may potentially disclose stack contents via the returned address data, or crash. While name lookup normally just fails incorrectly, crashes are not difficult to trigger, with valid DNS responses that are propagated by DNS resolvers.
Reference: https://sourceware.org/bugzilla/showbug.cgi?id=30842
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2234712?
The severity of REDHAT-BUG-2234712 is considered critical due to potential stack content disclosure and system crashes.
How do I fix REDHAT-BUG-2234712?
To fix REDHAT-BUG-2234712, ensure that your system is configured to avoid using no-aaaa mode and limit the size of DNS responses.
What software is affected by REDHAT-BUG-2234712?
REDHAT-BUG-2234712 affects the GNU glibc library.
Can REDHAT-BUG-2234712 lead to data leakage?
Yes, REDHAT-BUG-2234712 can potentially lead to data leakage by disclosing stack contents if exploited.
What is the impact of REDHAT-BUG-2234712 on system stability?
The impact of REDHAT-BUG-2234712 includes the potential for system crashes when handling oversized DNS responses.