CVE-2013-7424: gnu glibc DEPRECATED: Code
Vulnerability summary
CVE-2013-7424 is a medium (CVSS 5.1) DEPRECATED: Code vulnerability in gnu glibc. EPSS estimates a 2.68% chance of exploitation in the next 30 days, higher than 85.8% of scored vulnerabilities.
Not severe (CVSS 5.1, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 3Timeline
- 26-08-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI_IDN flag is used, allows context-dependent attackers to cause a denial of service (invalid free) and possibly execute arbitrary code via unspecified vectors, as demonstrated by an internationalized domain name to ping6.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.68%
Chance of exploitation in the next 30 days
Percentile
86%
Versus all other CVEs
30-day change
No change 0.00 pp
From 2.68% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat8 products
- glibc< 0:2.5-123.el5_11.3
- glibc-common< 0:2.5-123.el5_11.3
- glibc-debuginfo< 0:2.5-123.el5_11.3
- glibc-debuginfo-common< 0:2.5-123.el5_11.3
- glibc-devel< 0:2.5-123.el5_11.3
Debian1 product
- glibc< 2.15-1
Gnu1 product
- glibc≤ 2.14.1
Ubuntu1 product
- eglibc< 2.19-0ubuntu6.5
4 vendors · 11 products
References
15 links- sourceware.org/git/gitweb.cgi?p=glibc.git%3Ba=commitdiff%3Bh=2e96f1c7X Refsource CONFIRM
- bugzilla.redhat.com/show_bug.cgi?id=981942X Refsource CONFIRM
- sourceware.org/bugzilla/show_bug.cgi?id=18011X Refsource CONFIRM
