OESA-2023-1688

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1688

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2023-1688.json

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2023-1688

Upstream

CVE-2023-4806

CVE-2023-4813

CVE-2023-5156

Published

2023-09-28T11:06:01Z

Modified

2025-08-12T05:23:26.883324Z

Summary

glibc security update

Details

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.

Security Fix(es):

A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the nss_gethostbyname2_r and _nss_getcanonnamer hooks without implementing the nss*gethostbyname3r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AFINET6 address family with AICANONNAME, AIALL and AIV4MAPPED as flags.(CVE-2023-4806)

A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.(CVE-2023-4813)

A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash.(CVE-2023-5156)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:20.03-LTS-SP1 / glibc

Package

Name: glibc
Purl: pkg:rpm/openEuler/glibc&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28-97.oe1

Ecosystem specific

{
    "src": [
        "glibc-2.28-97.oe1.src.rpm"
    ],
    "x86_64": [
        "glibc-all-langpacks-2.28-97.oe1.x86_64.rpm",
        "glibc-debugutils-2.28-97.oe1.x86_64.rpm",
        "glibc-debuginfo-2.28-97.oe1.x86_64.rpm",
        "glibc-common-2.28-97.oe1.x86_64.rpm",
        "glibc-benchtests-2.28-97.oe1.x86_64.rpm",
        "glibc-compat-2.17-2.28-97.oe1.x86_64.rpm",
        "glibc-devel-2.28-97.oe1.x86_64.rpm",
        "glibc-nss-devel-2.28-97.oe1.x86_64.rpm",
        "glibc-debugsource-2.28-97.oe1.x86_64.rpm",
        "nscd-2.28-97.oe1.x86_64.rpm",
        "glibc-2.28-97.oe1.x86_64.rpm",
        "glibc-locale-source-2.28-97.oe1.x86_64.rpm",
        "libnsl-2.28-97.oe1.x86_64.rpm",
        "nss_modules-2.28-97.oe1.x86_64.rpm"
    ],
    "aarch64": [
        "glibc-compat-2.17-2.28-97.oe1.aarch64.rpm",
        "glibc-debugutils-2.28-97.oe1.aarch64.rpm",
        "glibc-debuginfo-2.28-97.oe1.aarch64.rpm",
        "glibc-locale-source-2.28-97.oe1.aarch64.rpm",
        "glibc-debugsource-2.28-97.oe1.aarch64.rpm",
        "nscd-2.28-97.oe1.aarch64.rpm",
        "libnsl-2.28-97.oe1.aarch64.rpm",
        "nss_modules-2.28-97.oe1.aarch64.rpm",
        "glibc-2.28-97.oe1.aarch64.rpm",
        "glibc-devel-2.28-97.oe1.aarch64.rpm",
        "glibc-all-langpacks-2.28-97.oe1.aarch64.rpm",
        "glibc-benchtests-2.28-97.oe1.aarch64.rpm",
        "glibc-nss-devel-2.28-97.oe1.aarch64.rpm",
        "glibc-common-2.28-97.oe1.aarch64.rpm"
    ],
    "noarch": [
        "glibc-help-2.28-97.oe1.noarch.rpm"
    ]
}

openEuler:20.03-LTS-SP3 / glibc

Package

Name: glibc
Purl: pkg:rpm/openEuler/glibc&distro=openEuler-20.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28-97.oe1

Ecosystem specific

{
    "src": [
        "glibc-2.28-97.oe1.src.rpm"
    ],
    "x86_64": [
        "glibc-devel-2.28-97.oe1.x86_64.rpm",
        "glibc-compat-2.17-2.28-97.oe1.x86_64.rpm",
        "libnsl-2.28-97.oe1.x86_64.rpm",
        "glibc-debugutils-2.28-97.oe1.x86_64.rpm",
        "glibc-benchtests-2.28-97.oe1.x86_64.rpm",
        "glibc-all-langpacks-2.28-97.oe1.x86_64.rpm",
        "glibc-nss-devel-2.28-97.oe1.x86_64.rpm",
        "nscd-2.28-97.oe1.x86_64.rpm",
        "glibc-2.28-97.oe1.x86_64.rpm",
        "glibc-locale-source-2.28-97.oe1.x86_64.rpm",
        "glibc-common-2.28-97.oe1.x86_64.rpm",
        "glibc-debugsource-2.28-97.oe1.x86_64.rpm",
        "glibc-debuginfo-2.28-97.oe1.x86_64.rpm",
        "nss_modules-2.28-97.oe1.x86_64.rpm"
    ],
    "aarch64": [
        "glibc-debugutils-2.28-97.oe1.aarch64.rpm",
        "glibc-nss-devel-2.28-97.oe1.aarch64.rpm",
        "glibc-all-langpacks-2.28-97.oe1.aarch64.rpm",
        "glibc-2.28-97.oe1.aarch64.rpm",
        "libnsl-2.28-97.oe1.aarch64.rpm",
        "nscd-2.28-97.oe1.aarch64.rpm",
        "glibc-locale-source-2.28-97.oe1.aarch64.rpm",
        "nss_modules-2.28-97.oe1.aarch64.rpm",
        "glibc-devel-2.28-97.oe1.aarch64.rpm",
        "glibc-common-2.28-97.oe1.aarch64.rpm",
        "glibc-debuginfo-2.28-97.oe1.aarch64.rpm",
        "glibc-benchtests-2.28-97.oe1.aarch64.rpm",
        "glibc-compat-2.17-2.28-97.oe1.aarch64.rpm",
        "glibc-debugsource-2.28-97.oe1.aarch64.rpm"
    ],
    "noarch": [
        "glibc-help-2.28-97.oe1.noarch.rpm"
    ]
}

openEuler:22.03-LTS / glibc

Package

Name: glibc
Purl: pkg:rpm/openEuler/glibc&distro=openEuler-22.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.34-136.oe2203sp2

Ecosystem specific

{
    "src": [
        "glibc-2.34-136.oe2203.src.rpm",
        "glibc-2.34-136.oe2203sp1.src.rpm",
        "glibc-2.34-136.oe2203sp2.src.rpm"
    ],
    "x86_64": [
        "nss_modules-2.34-136.oe2203.x86_64.rpm",
        "glibc-debuginfo-2.34-136.oe2203.x86_64.rpm",
        "glibc-common-2.34-136.oe2203.x86_64.rpm",
        "glibc-compat-2.17-2.34-136.oe2203.x86_64.rpm",
        "glibc-locale-source-2.34-136.oe2203.x86_64.rpm",
        "glibc-debugutils-2.34-136.oe2203.x86_64.rpm",
        "glibc-debugsource-2.34-136.oe2203.x86_64.rpm",
        "glibc-2.34-136.oe2203.x86_64.rpm",
        "nscd-2.34-136.oe2203.x86_64.rpm",
        "glibc-devel-2.34-136.oe2203.x86_64.rpm",
        "glibc-all-langpacks-2.34-136.oe2203.x86_64.rpm",
        "glibc-locale-archive-2.34-136.oe2203.x86_64.rpm",
        "glibc-nss-devel-2.34-136.oe2203.x86_64.rpm",
        "libnsl-2.34-136.oe2203.x86_64.rpm",
        "glibc-locale-archive-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-nss-devel-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-locale-source-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-debugsource-2.34-136.oe2203sp1.x86_64.rpm",
        "nscd-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-common-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-devel-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-all-langpacks-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-debuginfo-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-debugutils-2.34-136.oe2203sp1.x86_64.rpm",
        "nss_modules-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-compat-2.17-2.34-136.oe2203sp1.x86_64.rpm",
        "libnsl-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-compat-2.17-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-debuginfo-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-common-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-nss-devel-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-locale-archive-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-locale-source-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-debugutils-2.34-136.oe2203sp2.x86_64.rpm",
        "libnsl-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-all-langpacks-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-devel-2.34-136.oe2203sp2.x86_64.rpm",
        "nscd-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-debugsource-2.34-136.oe2203sp2.x86_64.rpm",
        "nss_modules-2.34-136.oe2203sp2.x86_64.rpm"
    ],
    "aarch64": [
        "glibc-compat-2.17-2.34-136.oe2203.aarch64.rpm",
        "nss_modules-2.34-136.oe2203.aarch64.rpm",
        "glibc-common-2.34-136.oe2203.aarch64.rpm",
        "glibc-debugsource-2.34-136.oe2203.aarch64.rpm",
        "glibc-nss-devel-2.34-136.oe2203.aarch64.rpm",
        "nscd-2.34-136.oe2203.aarch64.rpm",
        "glibc-locale-archive-2.34-136.oe2203.aarch64.rpm",
        "glibc-all-langpacks-2.34-136.oe2203.aarch64.rpm",
        "glibc-debugutils-2.34-136.oe2203.aarch64.rpm",
        "glibc-devel-2.34-136.oe2203.aarch64.rpm",
        "glibc-2.34-136.oe2203.aarch64.rpm",
        "glibc-locale-source-2.34-136.oe2203.aarch64.rpm",
        "glibc-debuginfo-2.34-136.oe2203.aarch64.rpm",
        "libnsl-2.34-136.oe2203.aarch64.rpm",
        "glibc-compat-2.17-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-debugutils-2.34-136.oe2203sp1.aarch64.rpm",
        "nss_modules-2.34-136.oe2203sp1.aarch64.rpm",
        "nscd-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-common-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-debugsource-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-devel-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-debuginfo-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-locale-source-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-all-langpacks-2.34-136.oe2203sp1.aarch64.rpm",
        "libnsl-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-nss-devel-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-locale-archive-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-nss-devel-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-common-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-locale-source-2.34-136.oe2203sp2.aarch64.rpm",
        "nss_modules-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-debugutils-2.34-136.oe2203sp2.aarch64.rpm",
        "libnsl-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-locale-archive-2.34-136.oe2203sp2.aarch64.rpm",
        "nscd-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-debugsource-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-compat-2.17-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-devel-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-debuginfo-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-all-langpacks-2.34-136.oe2203sp2.aarch64.rpm"
    ],
    "noarch": [
        "glibc-help-2.34-136.oe2203.noarch.rpm",
        "glibc-help-2.34-136.oe2203sp1.noarch.rpm",
        "glibc-help-2.34-136.oe2203sp2.noarch.rpm"
    ]
}

openEuler:22.03-LTS-SP1 / glibc

Package

Name: glibc
Purl: pkg:rpm/openEuler/glibc&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.34-136.oe2203sp1

Ecosystem specific

{
    "src": [
        "glibc-2.34-136.oe2203sp1.src.rpm"
    ],
    "x86_64": [
        "glibc-locale-archive-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-nss-devel-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-locale-source-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-debugsource-2.34-136.oe2203sp1.x86_64.rpm",
        "nscd-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-common-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-devel-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-all-langpacks-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-debuginfo-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-debugutils-2.34-136.oe2203sp1.x86_64.rpm",
        "nss_modules-2.34-136.oe2203sp1.x86_64.rpm",
        "glibc-compat-2.17-2.34-136.oe2203sp1.x86_64.rpm",
        "libnsl-2.34-136.oe2203sp1.x86_64.rpm"
    ],
    "aarch64": [
        "glibc-compat-2.17-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-debugutils-2.34-136.oe2203sp1.aarch64.rpm",
        "nss_modules-2.34-136.oe2203sp1.aarch64.rpm",
        "nscd-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-common-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-debugsource-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-devel-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-debuginfo-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-locale-source-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-all-langpacks-2.34-136.oe2203sp1.aarch64.rpm",
        "libnsl-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-nss-devel-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-locale-archive-2.34-136.oe2203sp1.aarch64.rpm",
        "glibc-2.34-136.oe2203sp1.aarch64.rpm"
    ],
    "noarch": [
        "glibc-help-2.34-136.oe2203sp1.noarch.rpm"
    ]
}

openEuler:22.03-LTS-SP2 / glibc

Package

Name: glibc
Purl: pkg:rpm/openEuler/glibc&distro=openEuler-22.03-LTS-SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.34-136.oe2203sp2

Ecosystem specific

{
    "src": [
        "glibc-2.34-136.oe2203sp2.src.rpm"
    ],
    "x86_64": [
        "glibc-compat-2.17-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-debuginfo-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-common-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-nss-devel-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-locale-archive-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-locale-source-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-debugutils-2.34-136.oe2203sp2.x86_64.rpm",
        "libnsl-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-all-langpacks-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-devel-2.34-136.oe2203sp2.x86_64.rpm",
        "nscd-2.34-136.oe2203sp2.x86_64.rpm",
        "glibc-debugsource-2.34-136.oe2203sp2.x86_64.rpm",
        "nss_modules-2.34-136.oe2203sp2.x86_64.rpm"
    ],
    "aarch64": [
        "glibc-nss-devel-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-common-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-locale-source-2.34-136.oe2203sp2.aarch64.rpm",
        "nss_modules-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-debugutils-2.34-136.oe2203sp2.aarch64.rpm",
        "libnsl-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-locale-archive-2.34-136.oe2203sp2.aarch64.rpm",
        "nscd-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-debugsource-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-compat-2.17-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-devel-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-debuginfo-2.34-136.oe2203sp2.aarch64.rpm",
        "glibc-all-langpacks-2.34-136.oe2203sp2.aarch64.rpm"
    ],
    "noarch": [
        "glibc-help-2.34-136.oe2203sp2.noarch.rpm"
    ]
}