CVE-2023-4527: Glibc: stack read overflow in getaddrinfo in no-aaaa mode
Vulnerability summary
CVE-2023-4527 is a medium (CVSS 6.5) Out-of-bounds Read vulnerability in fedoraproject fedora. EPSS estimates a 1.67% chance of exploitation in the next 30 days, higher than 76.8% of scored vulnerabilities. 1 public exploit is recorded.
Not severe (CVSS 6.5, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 4 · Related 3Timeline
- 18-09-2023PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash.
CVSS metrics
5 scores · 5 sources · 1 version- OSV · DebianEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
- OSV · WolfiEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
- OSV · ChainguardEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
- NVDNIST6.5MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
EPSS trend
Probability
1.67%
Chance of exploitation in the next 30 days
Percentile
77%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.67% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (bugzilla.redhat.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Redhat20 products
- codeready_linux_builder_eus9.2
- codeready_linux_builder_eus_for_power_little_endian9.0_ppc64le
- codeready_linux_builder_eus_for_power_little_endian_eus9.2_ppc64le
- codeready_linux_builder_for_arm649.0_aarch64
- codeready_linux_builder_for_arm64_eus9.2_aarch64
Netapp5 products
Chainguard1 product
- glibc< 2.38-r2
Debian1 product
- glibc< 2.36-9+deb12u3 | < 2.37-9
Fedoraproject1 product
- fedoraEOL37 | 38 | 39
Gnu1 product
- glibc≥ 2.36, < 2.36.113 | ≥ 2.37, < 2.37.38 | ≥ 2.38, < 2.38.19
Wolfi1 product
- glibc< 2.38-r2
7 vendors · 30 products
References
14 links- access.redhat.com/errata/RHSA-2023:5453Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
- access.redhat.com/errata/RHSA-2023:5455Vendor AdvisoryX Refsource REDHATAdvisoryThird Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=2234712Issue TrackingX Refsource REDHATREPORTExploitThird Party Advisory
- www.openwall.com/lists/oss-security/2023/09/25/1X TransferredAdvisoryMailing ListThird Party Advisory
