REDHAT-BUG-2237782: Medium severity GNU glibc vulnerability
In an extremely rare situation, the getaddrinfo function in glibc may access memory that has already been freed, resulting in an application crash.
This issue is only exploitable when a NSS module implements only the nssgethostbyname2r hook without implementing the nssgethostbyname3r hook. There are no known modules that are implemented in this way.
In addition to that condition, the resolved name should return a large number of IPv6 as well as IPv4 and the call to the getaddrinfo function should have AFINET6 with AICANONNAME, AIALL and AIV4MAPPED as flags.
Reference: https://sourceware.org/bugzilla/showbug.cgi?id=30843
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2237782?
The severity of REDHAT-BUG-2237782 is classified as high due to the potential for application crashes.
How can REDHAT-BUG-2237782 be fixed?
To fix REDHAT-BUG-2237782, ensure that the NSS module implements both the _nss_*_gethostbyname2_r and _nss_*_gethostbyname3_r hooks appropriately.
What impact does REDHAT-BUG-2237782 have on applications?
REDHAT-BUG-2237782 can lead to application crashes under specific conditions when using the getaddrinfo function.
Which software is affected by REDHAT-BUG-2237782?
REDHAT-BUG-2237782 affects the GNU C Library (glibc) when certain NSS module implementations are used.
Is REDHAT-BUG-2237782 considered an exploit?
While REDHAT-BUG-2237782 may not be easily exploitable, it poses a significant risk of instability in affected applications.