CVE-2013-1914
published 2013-04-29CVE-2013-1914: Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote…
PriorityP427medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
4.11%
89.7th percentile
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of domain conversion results.
Affected
61 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | glibc | < glibc 2.18-1 (bookworm) | glibc 2.18-1 (bookworm) |
| debian | glibc | < glibc 2.17-2 (bookworm) | glibc 2.17-2 (bookworm) |
| gnu | glibc | <= 2.18 | — |
| gnu | glibc | <= 2.17 | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
| gnu | glibc | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_ubuntu7.5HIGH
vendor_debian5.0LOW
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jcwq-q9mq-r3fv: Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo
ghsa_unreviewed·2022-05-17·CVSS 5.0
CVE-2013-4458 [MEDIUM] CWE-119 GHSA-jcwq-q9mq-r3fv: Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.18 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of AF_INET6 address results. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1914.
GHSA
GHSA-gcw3-7j9c-37j4: Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo
ghsa_unreviewed·2022-05-13
CVE-2013-1914 [MEDIUM] CWE-119 GHSA-gcw3-7j9c-37j4: Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of domain conversion results.
OSV
CVE-2013-4458: Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo
osv·2013-12-12·CVSS 5.0
CVE-2013-4458 [MEDIUM] CVE-2013-4458: Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.18 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of AF_INET6 address results. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1914.
OSV
CVE-2013-1914: Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo
osv·2013-04-29·CVSS 5.0
CVE-2013-1914 [MEDIUM] CVE-2013-1914: Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of domain conversion results.
Red Hat
glibc: Stack (frame) overflow in getaddrinfo() when called with AF_INET6
vendor_redhat·2013-10-22·CVSS 5.0
CVE-2013-4458 [MEDIUM] CWE-121 glibc: Stack (frame) overflow in getaddrinfo() when called with AF_INET6
glibc: Stack (frame) overflow in getaddrinfo() when called with AF_INET6
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.18 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of AF_INET6 address results. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1914.
It was found that getaddrinfo() did not limit the amount of stack memory used during name resolution. An attacker able to make an application resolve an attacker-controlled hostname or IP address could possibly cause the application to exhaust all stack memory and crash.
Statement: This issue affects the versions of glibc as shipped with Red Ha
Ubuntu
GNU C Library vulnerabilities
vendor_ubuntu·2013-10-21·CVSS 7.5
CVE-2012-4412 [HIGH] GNU C Library vulnerabilities
Title: GNU C Library vulnerabilities
Summary: Several security issues were fixed in the GNU C Library.
It was discovered that the GNU C Library incorrectly handled the strcoll()
function. An attacker could use this issue to cause a denial of service, or
possibly execute arbitrary code. (CVE-2012-4412, CVE-2012-4424)
It was discovered that the GNU C Library incorrectly handled multibyte
characters in the regular expression matcher. An attacker could use this
issue to cause a denial of service. (CVE-2013-0242)
It was discovered that the GNU C Library incorrectly handled large numbers
of domain conversion results in the getaddrinfo() function. An attacker
could use this issue to cause a denial of service. (CVE-2013-1914)
It was discovered that the GNU C Library readdir_r() function incor
Red Hat
glibc: Stack (frame) overflow in getaddrinfo() when processing entry mapping to long list of address structures
vendor_redhat·2013-04-03·CVSS 5.0
CVE-2013-1914 [MEDIUM] glibc: Stack (frame) overflow in getaddrinfo() when processing entry mapping to long list of address structures
glibc: Stack (frame) overflow in getaddrinfo() when processing entry mapping to long list of address structures
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of domain conversion results.
It was found that getaddrinfo() did not limit the amount of stack memory used during name resolution. An attacker able to make an application resolve an attacker-controlled hostname or IP address could possibly cause the application to exhaust all stack memory and crash.
Package: glibc (Red Hat Enterprise Linux 7) - Not affected
Debian
CVE-2013-4458: glibc - Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddr...
vendor_debian·2013·CVSS 5.0
CVE-2013-4458 [MEDIUM] CVE-2013-4458: glibc - Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddr...
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.18 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of AF_INET6 address results. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1914.
Scope: local
bookworm: resolved (fixed in 2.18-1)
bullseye: resolved (fixed in 2.18-1)
forky: resolved (fixed in 2.18-1)
sid: resolved (fixed in 2.18-1)
trixie: resolved (fixed in 2.18-1)
Debian
CVE-2013-1914: glibc - Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddr...
vendor_debian·2013·CVSS 5.0
CVE-2013-1914 [MEDIUM] CVE-2013-1914: glibc - Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddr...
Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote attackers to cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of domain conversion results.
Scope: local
bookworm: resolved (fixed in 2.17-2)
bullseye: resolved (fixed in 2.17-2)
forky: resolved (fixed in 2.17-2)
sid: resolved (fixed in 2.17-2)
trixie: resolved (fixed in 2.17-2)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2013-4458 glibc: Stack (frame) overflow in getaddrinfo() when called with AF_INET6
bugzilla·2013-10-22·CVSS 5.0
CVE-2013-4458 [MEDIUM] CVE-2013-4458 glibc: Stack (frame) overflow in getaddrinfo() when called with AF_INET6
CVE-2013-4458 glibc: Stack (frame) overflow in getaddrinfo() when called with AF_INET6
A stack (frame) overflow flaw, which led to a denial of service (application crash), was found in the way glibc's getaddrinfo() function processed certain requests when called with AF_INET6. A similar flaw to CVE-2013-1914, this affects AF_INET6 rather than AF_UNSPEC.
A proposed patch has been submitted for review [1]. No CVE has been assigned yet.
[1] https://sourceware.org/ml/libc-alpha/2013-10/msg00733.html
Discussion:
Upstream bug report:
https://sourceware.org/bugzilla/show_bug.cgi?id=16072
---
Fix pulled into Fedora rawhide (2.18.90-13).
---
Statement:
This issue affects the versions of glibc as shipped with Red Hat Enterprise Linux 5. This issue is not planned to be fixed in Red Hat Ent
Bugzilla
CVE-2013-1914 glibc: Stack (frame) overflow in getaddrinfo() when processing entry mapping to long list of address structures
bugzilla·2013-04-03·CVSS 5.0
CVE-2013-1914 [MEDIUM] CVE-2013-1914 glibc: Stack (frame) overflow in getaddrinfo() when processing entry mapping to long list of address structures
CVE-2013-1914 glibc: Stack (frame) overflow in getaddrinfo() when processing entry mapping to long list of address structures
A stack (frame) overflow flaw, leading to denial of service (application crash), was found in the way getaddrinfo() routine (returning a list of address structures for particular request) of glibc, the collection of GNU libc libraries, processed certain requests. If an application linked against glibc accepted untrusted getaddrinfo() input remotely, a remote attacker could issue a specially-crafted request, which once processed would lead to that application crash.
References:
[1] https://bugzilla.novell.com/show_bug.cgi?id=813121
[2] http://www.openwall.com/lists/oss-security/2013/04/03/2
Proposed Novell patch:
[3] http://bugzillafiles.novell.org/attachment.cgi?
Bugzilla
CVE-2013-1914 glibc: Stack (frame) overflow in getaddrinfo() when processing entry mapping to long list of address structures [fedora-all]
bugzilla·2013-04-03·CVSS 5.0
CVE-2013-1914 [MEDIUM] CVE-2013-1914 glibc: Stack (frame) overflow in getaddrinfo() when processing entry mapping to long list of address structures [fedora-all]
CVE-2013-1914 glibc: Stack (frame) overflow in getaddrinfo() when processing entry mapping to long list of address structures [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
B
arXiv
One Bad Apple Spoils the Barrel: Understanding the Security Risks Introduced by Third-Party Components in IoT Firmware
arxiv_fulltext·2022-12-29
One Bad Apple Spoils the Barrel: Understanding the Security Risks Introduced by Third-Party Components in IoT Firmware
One Bad Apple Spoils the Barrel: Understanding the Security Risks Introduced by Third-Party Components in IoT Firmware
## Abstract
Currently, the development of IoT firmware heavily depends on third-party components (TPCs) to improve development efficiency. Nevertheless, TPCs are not secure, and the vulnerabilities in TPCs will influence the security of IoT firmware. Existing works pay less attention to the vulnerabilities caused by TPCs, and we still lack a comprehensive understanding of the security impact of TPC vulnerability against firmware. To fill in the knowledge gap, we design and implement , which leverages syntactical features and control-flow graph features to detect the TPCs in firmware, and then recognizes the corresponding vulnerabilities. Based on , we present the first l
http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0769.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1605.htmlhttp://seclists.org/fulldisclosure/2021/Sep/0http://secunia.com/advisories/52817http://secunia.com/advisories/55113http://sourceware.org/bugzilla/show_bug.cgi?id=15330http://sourceware.org/git/?p=glibc.git%3Ba=commitdiff%3Bh=1cef1b19089528db11f221e938f60b9b048945d7http://www.mandriva.com/security/advisories?name=MDVSA-2013:163http://www.mandriva.com/security/advisories?name=MDVSA-2013:283http://www.mandriva.com/security/advisories?name=MDVSA-2013:284http://www.openwall.com/lists/oss-security/2013/04/03/2http://www.openwall.com/lists/oss-security/2013/04/03/8http://www.openwall.com/lists/oss-security/2013/04/05/1http://www.securityfocus.com/bid/58839http://www.ubuntu.com/usn/USN-1991-1http://www.vmware.com/security/advisories/VMSA-2014-0008.htmlhttps://bugzilla.novell.com/show_bug.cgi?id=813121https://bugzilla.redhat.com/show_bug.cgi?id=947882https://security.gentoo.org/glsa/201503-04http://packetstormsecurity.com/files/164014/Moxa-Command-Injection-Cross-Site-Scripting-Vulnerable-Software.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0769.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1605.htmlhttp://seclists.org/fulldisclosure/2021/Sep/0http://secunia.com/advisories/52817http://secunia.com/advisories/55113http://sourceware.org/bugzilla/show_bug.cgi?id=15330http://sourceware.org/git/?p=glibc.git%3Ba=commitdiff%3Bh=1cef1b19089528db11f221e938f60b9b048945d7http://www.mandriva.com/security/advisories?name=MDVSA-2013:163http://www.mandriva.com/security/advisories?name=MDVSA-2013:283http://www.mandriva.com/security/advisories?name=MDVSA-2013:284http://www.openwall.com/lists/oss-security/2013/04/03/2http://www.openwall.com/lists/oss-security/2013/04/03/8http://www.openwall.com/lists/oss-security/2013/04/05/1http://www.securityfocus.com/bid/58839http://www.ubuntu.com/usn/USN-1991-1http://www.vmware.com/security/advisories/VMSA-2014-0008.htmlhttps://bugzilla.novell.com/show_bug.cgi?id=813121https://bugzilla.redhat.com/show_bug.cgi?id=947882https://security.gentoo.org/glsa/201503-04
2013-04-29
Published