CVE-2023-5156

概要

参考情報

• access.redhat.com/security/cve/CVE-2023-5156 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• sourceware.org/bugzilla/show_bug.cgi · Issue Tracking
• sourceware.org/git · Mailing List
• openwall.com/lists/oss-security/2023/10/03/4
• openwall.com/lists/oss-security/2023/10/03/5
• openwall.com/lists/oss-security/2023/10/03/6
• openwall.com/lists/oss-security/2023/10/03/8
• security.gentoo.org/glsa/202402-01
• cert-portal.siemens.com/productcert/html/ssa-398330.html
• cert-portal.siemens.com/productcert/html/ssa-831302.html

glibc のその他の脆弱性

• CVE-2026-6238中 6.5The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA…
• CVE-2026-5435高 7.3The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplie…
• CVE-2026-5928高 7.5Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and …
• CVE-2026-5450緊急 9.8Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format w…
• CVE-2026-4046高 7.5The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IB…