Количество 17
Количество 17
BDU:2026-10480
Уязвимость функции ns_printrrf, ns_printrr и fp_nquery системной библиотеки GNU C Library, позволяющая нарушителю вызвать отказ в обслуживании
CVE-2026-6238
The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory. These functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions.
CVE-2026-6238
The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory. These functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions.
CVE-2026-6238
The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory. These functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions.
CVE-2026-6238
Buffer overread in ns_printrrf with corrupted RDATA field
CVE-2026-6238
The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the ...
ROS-20260708-73-0038
Уязвимость glibc
GHSA-h8wx-jcwq-g3cp
The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to validate the RDATA content against the RDATA length in a DNS response when processing LOC, CERT, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory. These functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions.
openSUSE-SU-2026:21228-1
Security update for glibc
SUSE-SU-2026:3030-1
Security update for glibc
SUSE-SU-2026:3029-1
Security update for glibc
SUSE-SU-2026:2987-1
Security update for glibc
RLSA-2026:42952
Moderate: glibc security update
RLSA-2026:42733
Moderate: glibc security update
RLSA-2026:42694
Moderate: glibc security update
ELSA-2026-42952
ELSA-2026-42952: glibc security update (MODERATE)
ELSA-2026-42733
ELSA-2026-42733: glibc security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-10480 Уязвимость функции ns_printrrf, ns_printrr и fp_nquery системной библиотеки GNU C Library, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
 | CVE-2026-6238 The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory. These functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions. | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
 | CVE-2026-6238 The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory. These functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions. | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
 | CVE-2026-6238 The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory. These functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions. | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
 | CVE-2026-6238 Buffer overread in ns_printrrf with corrupted RDATA field | 0% Низкий | 3 месяца назад | |
| CVE-2026-6238 The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the ... | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
 | ROS-20260708-73-0038 Уязвимость glibc | CVSS3: 6.5 | 0% Низкий | 23 дня назад |
| GHSA-h8wx-jcwq-g3cp The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to validate the RDATA content against the RDATA length in a DNS response when processing LOC, CERT, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory. These functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions. | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
 | openSUSE-SU-2026:21228-1 Security update for glibc | 27 дней назад | ||
| SUSE-SU-2026:3030-1 Security update for glibc | 16 дней назад | ||
| SUSE-SU-2026:3029-1 Security update for glibc | 16 дней назад | ||
| SUSE-SU-2026:2987-1 Security update for glibc | 16 дней назад | ||
 | RLSA-2026:42952 Moderate: glibc security update | 8 дней назад | ||
| RLSA-2026:42733 Moderate: glibc security update | 9 дней назад | ||
| RLSA-2026:42694 Moderate: glibc security update | 8 дней назад | ||
| ELSA-2026-42952 ELSA-2026-42952: glibc security update (MODERATE) | 9 дней назад | ||
| ELSA-2026-42733 ELSA-2026-42733: glibc security update (MODERATE) | 8 дней назад |
Уязвимостей на страницу