CVE-2023-4806
published 2023-09-18CVE-2023-4806: A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an…
PriorityP428medium5.9CVSS 3.1
AVNACHPRNUINSUCNINAH
EPSS
1.44%
70.2th percentile
A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.
Affected
45 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | glibc | < glibc 2.36-9+deb12u3 (bookworm) | glibc 2.36-9+deb12u3 (bookworm) |
| debian | glibc | < glibc 2.37-11 (forky) | glibc 2.37-11 (forky) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| gnu | glibc | — | — |
| gnu | glibc | >= 0 < 2.36-9+deb12u3 | 2.36-9+deb12u3 |
| gnu | glibc | >= 0 < 2.37-11 | 2.37-11 |
| gnu | glibc | >= 0 < 2.37-10 | 2.37-10 |
| gnu | glibc | >= 0 < 2.37-11 | 2.37-11 |
| gnu | glibc | >= 0 < 2.37-10 | 2.37-10 |
| gnu | glibc | >= 0 < 2.31-0ubuntu9.14 | 2.31-0ubuntu9.14 |
| gnu | glibc | >= 0 < 2.35-0ubuntu3.6 | 2.35-0ubuntu3.6 |
| gnu | glibc | >= 0 < 2.35-0ubuntu3.5 | 2.35-0ubuntu3.5 |
| gnu | glibc | >= 0 < 2.23-0ubuntu11.3+esm5 | 2.23-0ubuntu11.3+esm5 |
| gnu | glibc | >= 0 < 2.27-3ubuntu1.6+esm1 | 2.27-3ubuntu1.6+esm1 |
| gnu | glibc | >= 2.34 < 2.39 | 2.39 |
| msrc | azl3_glibc_2.38-11_on_azure_linux_3.0 | — | — |
| msrc | cbl2_glibc_2.35-6_on_cbl_mariner_2.0 | — | — |
| paloalto | pan-os | — | — |
| redhat | codeready_linux_builder_eus | — | — |
| redhat | codeready_linux_builder_eus_for_power_little_endian | — | — |
| redhat | codeready_linux_builder_eus_for_power_little_endian_eus | — | — |
| redhat | codeready_linux_builder_for_arm64 | — | — |
| redhat | codeready_linux_builder_for_arm64_eus | — | — |
CVSS provenance
nvdv3.15.9MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
osv5.9MEDIUM
vendor_debian5.9LOW
vendor_msrc5.9MEDIUM
vendor_redhat5.9MEDIUM
vendor_ubuntu5.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens SIMATIC S7-1500 CPU Family
cisa_ics·2025-06-12
Siemens SIMATIC S7-1500 CPU Family
ICS Advisory
##
Siemens SIMATIC S7-1500 CPU Family
Release DateJune 12, 2025
Alert CodeICSA-25-162-05
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 8.7
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SIMATIC S7-1500 CPU family
- Vulnerabilities: Missing Encryption of Sensitive Data, Out-of-bounds Read, Use After Free, Stack-
Palo Alto
PAN-SA-2024-0004 Informational Bulletin: OSS CVEs fixed in PAN-OS
vendor_paloalto·2024-04-10·CVSS 9.8
CVE-2015-5739 [CRITICAL] PAN-SA-2024-0004 Informational Bulletin: OSS CVEs fixed in PAN-OS
PAN-SA-2024-0004 Informational Bulletin: OSS CVEs fixed in PAN-OS
The Palo Alto Networks Product Security Assurance team has evaluated the following open source software (OSS) CVEs as they relate to PAN-OS. While it was not determined that these CVEs have any significant impact on PAN-OS, they have been fixed out of an abundance of caution. CVE Summary CVE-2015-5739 This CVE is fixed in PAN-OS 11.0.4, and all later PAN-OS versions. CVE-2016-10228 This CVE is fixed in PAN-OS 11.1.3, and all later PAN-OS versions. CVE-2017-8923 This CVE is fixed in PAN-OS 10.2.8, 11.0.3, and all later PAN-OS versions. CVE-2017-9120 This CVE is fixed in PAN-OS 10.2.8, 11.0.3, and all later PAN-OS versions. CVE-2018-25009 This CVE is fixed in PAN-OS 10.2.8, 11.0.4, 11.1.3, and all later PAN-OS versions. CVE-2
Ubuntu
GNU C Library regression
vendor_ubuntu·2024-01-10·CVSS 5.9
CVE-2023-4806 [MEDIUM] GNU C Library regression
Title: GNU C Library regression
Summary: USN-6541-1 introduced a regression in the GNU C Library.
USN-6541-1 fixed vulnerabilities in the GNU C Library. Unfortunately,
changes made to allow proper application of the fix for CVE-2023-4806 in
Ubuntu 22.04 LTS introduced an issue in the NSCD service IPv6 processing
functionalities. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that the GNU C Library was not properly handling certain
memory operations. An attacker could possibly use this issue to cause a
denial of service (application crash). (CVE-2023-4806, CVE-2023-4813)
It was discovered that the GNU C library was not properly implementing a
fix for CVE-2023-4806 in certain cases, which could lead to a memory leak.
An a
Ubuntu
GNU C Library vulnerabilities
vendor_ubuntu·2023-12-07·CVSS 5.9
CVE-2023-4806 [MEDIUM] GNU C Library vulnerabilities
Title: GNU C Library vulnerabilities
Summary: Several security issues were fixed in GNU C Library.
It was discovered that the GNU C Library was not properly handling certain
memory operations. An attacker could possibly use this issue to cause a
denial of service (application crash). (CVE-2023-4806, CVE-2023-4813)
It was discovered that the GNU C library was not properly implementing a
fix for CVE-2023-4806 in certain cases, which could lead to a memory leak.
An attacker could possibly use this issue to cause a denial of service
(application crash). This issue only affected Ubuntu 22.04 LTS and Ubuntu
23.04. (CVE-2023-5156)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
Red Hat
glibc: DoS due to memory leak in getaddrinfo.c
vendor_redhat·2023-09-25·CVSS 5.9
CVE-2023-5156 [MEDIUM] CWE-401 glibc: DoS due to memory leak in getaddrinfo.c
glibc: DoS due to memory leak in getaddrinfo.c
A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash.
A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash.
Package: compat-glibc (Red Hat Enterprise Linux 6) - Out of support scope
Package: glibc (Red Hat Enterprise Linux 6) - Out of support scope
Package: compat-glibc (Red Hat Enterprise Linux 7) - Out of support scope
Package: glibc (Red Hat Enterprise Linux 7) - Out of support scope
Package: glibc (Red Hat Enterprise Linux 8) - Not affected
Package: glibc (Red Hat Enterprise Linux 9) - Not affected
Red Hat
glibc: potential use-after-free in getaddrinfo()
vendor_redhat·2023-09-12·CVSS 5.9
CVE-2023-4806 [MEDIUM] CWE-416 glibc: potential use-after-free in getaddrinfo()
glibc: potential use-after-free in getaddrinfo()
A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.
A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when
Microsoft
Glibc: potential use-after-free in getaddrinfo()
vendor_msrc·2023-09-12·CVSS 5.9
CVE-2023-4806 [MEDIUM] CWE-416 Glibc: potential use-after-free in getaddrinfo()
Glibc: potential use-after-free in getaddrinfo()
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
redhat: redhat
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://learn.micr
Debian
CVE-2023-4806: glibc - A flaw has been identified in glibc. In an extremely rare situation, the getaddr...
vendor_debian·2023·CVSS 5.9
CVE-2023-4806 [MEDIUM] CVE-2023-4806: glibc - A flaw has been identified in glibc. In an extremely rare situation, the getaddr...
A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.
Scope: local
bookworm: resolved (fixed in 2.36-9+deb12u3)
bullseye: open
forky: resolved (fixed in 2.37-10)
sid: resolved (fixed in 2.37-10)
trixie: resolved (fixed in 2.37-10)
Debian
CVE-2023-5156: glibc - A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced...
vendor_debian·2023·CVSS 5.9
CVE-2023-5156 [MEDIUM] CVE-2023-5156: glibc - A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced...
A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 2.37-11)
sid: resolved (fixed in 2.37-11)
trixie: resolved (fixed in 2.37-11)
OSV
glibc regression
osv·2024-01-10·CVSS 5.9
CVE-2023-4806 [MEDIUM] glibc regression
glibc regression
USN-6541-1 fixed vulnerabilities in the GNU C Library. Unfortunately,
changes made to allow proper application of the fix for CVE-2023-4806 in
Ubuntu 22.04 LTS introduced an issue in the NSCD service IPv6 processing
functionalities. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that the GNU C Library was not properly handling certain
memory operations. An attacker could possibly use this issue to cause a
denial of service (application crash). (CVE-2023-4806, CVE-2023-4813)
It was discovered that the GNU C library was not properly implementing a
fix for CVE-2023-4806 in certain cases, which could lead to a memory leak.
An attacker could possibly use this issue to cause a denial of service
(application cr
OSV
glibc vulnerabilities
osv·2023-12-07·CVSS 5.9
CVE-2023-4806 [MEDIUM] glibc vulnerabilities
glibc vulnerabilities
It was discovered that the GNU C Library was not properly handling certain
memory operations. An attacker could possibly use this issue to cause a
denial of service (application crash). (CVE-2023-4806, CVE-2023-4813)
It was discovered that the GNU C library was not properly implementing a
fix for CVE-2023-4806 in certain cases, which could lead to a memory leak.
An attacker could possibly use this issue to cause a denial of service
(application crash). This issue only affected Ubuntu 22.04 LTS and Ubuntu
23.04. (CVE-2023-5156)
GHSA
GHSA-m7p3-g2hx-xfc3: A flaw was found in the GNU C Library
ghsa_unreviewed·2023-09-25·CVSS 5.9
CVE-2023-5156 [MEDIUM] CWE-401 GHSA-m7p3-g2hx-xfc3: A flaw was found in the GNU C Library
A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash.
OSV
CVE-2023-5156: A flaw was found in the GNU C Library
osv·2023-09-25·CVSS 5.9
CVE-2023-5156 [MEDIUM] CVE-2023-5156: A flaw was found in the GNU C Library
A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash.
GHSA
GHSA-5f52-v49r-796w: A flaw was found in glibc
ghsa_unreviewed·2023-09-18
CVE-2023-4806 [MEDIUM] CWE-416 GHSA-5f52-v49r-796w: A flaw was found in glibc
A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.
OSV
CVE-2023-4806: A flaw has been identified in glibc
osv·2023-09-18·CVSS 5.9
CVE-2023-4806 [MEDIUM] CVE-2023-4806: A flaw has been identified in glibc
A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2023-5156 glibc: DoS due to memory leak in getaddrinfo.c
bugzilla·2023-09-25·CVSS 5.9
CVE-2023-5156 [MEDIUM] CVE-2023-5156 glibc: DoS due to memory leak in getaddrinfo.c
CVE-2023-5156 glibc: DoS due to memory leak in getaddrinfo.c
The fix for CVE-2023-4806 in upstream, introduces a memory leak in getaddrinfo.c which could lead to a Denial-of-Service.
https://sourceware.org/bugzilla/show_bug.cgi?id=30884
https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=ec6b95c3303c700eb89eebeda2d7264cc184a796
Discussion:
Created glibc tracking bugs for this issue:
Affects: fedora-all [bug 2240543]
Bugzilla
CVE-2023-4806 glibc: potential use-after-free in getaddrinfo()
bugzilla·2023-09-06·CVSS 5.9
CVE-2023-4806 [MEDIUM] CVE-2023-4806 glibc: potential use-after-free in getaddrinfo()
CVE-2023-4806 glibc: potential use-after-free in getaddrinfo()
In an extremely rare situation, the getaddrinfo function in glibc may access memory that has already been freed, resulting in an application crash.
This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r hook without implementing the _nss_*_gethostbyname3_r hook. There are no known modules that are implemented in this way.
In addition to that condition, the resolved name should return a large number of IPv6 as well as IPv4 and the call to the getaddrinfo function should have AF_INET6 with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.
Reference:
https://sourceware.org/bugzilla/show_bug.cgi?id=30843
Discussion:
Created glibc tracking bugs for this issue:
Affects: fedora-all [bug 223860
https://access.redhat.com/errata/RHSA-2023:5453https://access.redhat.com/errata/RHSA-2023:5455https://access.redhat.com/errata/RHSA-2023:7409https://access.redhat.com/security/cve/CVE-2023-4806https://bugzilla.redhat.com/show_bug.cgi?id=2237782http://www.openwall.com/lists/oss-security/2023/10/03/4http://www.openwall.com/lists/oss-security/2023/10/03/5http://www.openwall.com/lists/oss-security/2023/10/03/6http://www.openwall.com/lists/oss-security/2023/10/03/8https://access.redhat.com/errata/RHSA-2023:5453https://access.redhat.com/errata/RHSA-2023:5455https://access.redhat.com/errata/RHSA-2023:7409https://access.redhat.com/security/cve/CVE-2023-4806https://bugzilla.redhat.com/show_bug.cgi?id=2237782https://lists.fedoraproject.org/archives/list/[email protected]/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/https://lists.fedoraproject.org/archives/list/[email protected]/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/https://lists.fedoraproject.org/archives/list/[email protected]/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/https://security.gentoo.org/glsa/202310-03https://security.netapp.com/advisory/ntap-20240125-0008/https://cert-portal.siemens.com/productcert/html/ssa-082556.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-831302.html
2023-09-18
Published