REDHAT-BUG-2277204: Medium severity GNU glibc vulnerability
After a failed cache insertion, addgetnetgrentX tries to send the non-existing response after the not-found header.
In addinnetgrX, addgetnetgrentX may have produced a NULL result, indicating a not-found status, but this is not handled in the subsequent code that prepares the record that will be sent out to the client.
Reference: https://sourceware.org/bugzilla/showbug.cgi?id=31678
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2277204?
The severity of REDHAT-BUG-2277204 is classified as moderate.
How do I fix REDHAT-BUG-2277204?
To fix REDHAT-BUG-2277204, ensure you apply the latest updates provided by Red Hat.
What software is affected by REDHAT-BUG-2277204?
REDHAT-BUG-2277204 affects the GNU glibc software.
What does REDHAT-BUG-2277204 entail?
REDHAT-BUG-2277204 involves handling errors related to returning a NULL response after a failed cache insertion.
Is there a workaround for REDHAT-BUG-2277204?
Currently, there is no officially recommended workaround for REDHAT-BUG-2277204.