| Package | Affected versions | Patched versions |
|---|---|---|
| glibc | ≥ 2.36, < 2.36.113≥ 2.37, < 2.37.38≥ 2.38, < 2.38.19 | 2.36.1132.37.382.38.19 |
| codeready linux builder eus | = 9.2 | |
| codeready linux builder eus for power little endian | = 9.0_ppc64le | |
| codeready linux builder eus for power little endian eus | = 9.2_ppc64le | |
| codeready linux builder for arm64 | = 9.0_aarch64 | |
| codeready linux builder for arm64 eus | = 9.2_aarch64 | |
| codeready linux builder for ibm z systems | = 9.0_s390x | |
| codeready linux builder for ibm z systems eus | = 9.2_s390x |
A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free