CVE-2023-4813
MediumSummary
A flaw in glibc may cause the gaih_inet function to use freed memory in uncommon situations, leading to an application crash. This issue is only exploitable when getaddrinfo is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=.
Risk Assessment
The risk for the organization is potential instability of applications using name resolution, which could lead to service disruptions.
Recommendation
It is recommended to update glibc to the latest patched version and review the /etc/nsswitch.conf configuration for non-standard SUCCESS= settings.
Original NVD description (English source)
A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=