A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.
CVE-2023-4813
CVSS base score
5.9 (v3.1)
Severity
MEDIUM
Attack vector
Network
Weakness
CWE-416
Last modified
October 30, 2026
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
gnu glibc
redhat enterprise linux
redhat enterprise linux eus
redhat enterprise linux for ibm z systems eus s390x
redhat enterprise linux for ibm z systems s390x
redhat enterprise linux for power little endian
redhat enterprise linux for power little endian eus
redhat enterprise linux server aus
redhat enterprise linux server tus
fedoraproject fedora
References
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- bugzilla.redhat.com Issue Tracking, Patch, Third Party Advisory
- www.openwall.com
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory