Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-4438

Опубликовано: 20 мар. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.4

Описание

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

needs-triage

jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

2.43-2ubuntu2
esm-infra-legacy/xenial

not-affected

code not present
esm-infra/bionic

not-affected

code not present
esm-infra/focal

not-affected

code not present
esm-infra/xenial

not-affected

code not present
jammy

not-affected

code not present
noble

released

2.39-0ubuntu8.8
questing

ignored

end of life, was needed
resolute

not-affected

2.43-2ubuntu2
upstream

needs-triage

Показывать по

EPSS

Процентиль: 24%
0.00316
Низкий

5.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 4
redhat
4 месяца назад

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.

CVSS3: 5.4
nvd
4 месяца назад

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.

CVSS3: 5.9
msrc
4 месяца назад

gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames

CVSS3: 5.4
debian
4 месяца назад

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.co ...

CVSS3: 5.4
github
4 месяца назад

Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.

EPSS

Процентиль: 24%
0.00316
Низкий

5.4 Medium

CVSS3