Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-935r-rfch-9mr7

Опубликовано: 20 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.

EPSS

Процентиль: 24%
0.00314
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-20
CWE-88

Связанные уязвимости

CVSS3: 5.4
ubuntu
8 месяцев назад

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.

CVSS3: 4
redhat
8 месяцев назад

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.

CVSS3: 5.4
nvd
8 месяцев назад

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.

CVSS3: 5.9
msrc
8 месяцев назад

gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames

CVSS3: 5.4
debian
8 месяцев назад

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.co ...

EPSS

Процентиль: 24%
0.00314
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-20
CWE-88