CVE-2013-4357: eglibc eglibc – CVSS 7.5 · Watchpost

← All vulnerabilities

CVE-2013-4357

ALTO 7.5CVE-2013-4357 · Published 31/12/2019 · updated 16/06/2026

In breve

CVE-2013-4357 è una vulnerabilità ALTO (CVSS 7.5) che riguarda eglibc (eglibc).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.2%, superiore al 88.3% delle vulnerabilità.
Correzione: aggiornare a 2.14 o successiva.

Package	Affected versions	Patched versions
eglibc eglibc	`< 2.14`	`2.14`

Description

The eglibc package before 2.14 incorrectly handled the getaddrinfo() function. An attacker could use this issue to cause a denial of service.

References

lists.opensuse.org/opensuse-security-announce/2014-09/msg00020.html · Issue Tracking
openwall.com/lists/oss-security/2013/09/17/4 · Mailing List
openwall.com/lists/oss-security/2013/09/17/8 · Mailing List
openwall.com/lists/oss-security/2015/01/28/18 · Exploit
openwall.com/lists/oss-security/2015/01/29/21 · Exploit
openwall.com/lists/oss-security/2015/02/24/3 · Mailing List
securityfocus.com/bid/67992 · Third Party Advisory
ubuntu.com/usn/USN-2306-1 · Third Party Advisory
ubuntu.com/usn/USN-2306-2 · Third Party Advisory
ubuntu.com/usn/USN-2306-3 · Third Party Advisory
access.redhat.com/security/cve/cve-2013-4357 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
bugzilla.suse.com/show_bug.cgi · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/95103 · Third Party Advisory
security-tracker.debian.org/tracker/CVE-2013-4357 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free