REDHAT-BUG-2463465: Medium severity GNU C Library (glibc) vulnerability
The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2463465?
The severity of REDHAT-BUG-2463465 is medium with a rating of 4.
What is REDHAT-BUG-2463465 about?
REDHAT-BUG-2463465 describes deprecated functions in the GNU C Library that can lead to out-of-bounds write vulnerabilities.
How do I fix REDHAT-BUG-2463465?
To fix REDHAT-BUG-2463465, update your GNU C Library to a version that does not use the deprecated functions.
What are the affected versions related to REDHAT-BUG-2463465?
REDHAT-BUG-2463465 affects GNU C Library version 2.2 and newer where deprecated functions are used.
What are the potential risks of not addressing REDHAT-BUG-2463465?
Not addressing REDHAT-BUG-2463465 may expose systems to security issues due to out-of-bounds writes affecting stability and confidentiality.