CVE-2023-5156

    Dashboard / Vulnerabilities / CVE-2023-5156

    CVE-2023-5156

    Published: 25 Sept 2023Last Modified: 28 Aug 2026

    Summary: Glibc: dos due to memory leak in getaddrinfo.c

    Details: A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash.

    References: http://www.openwall.com/lists/oss-security/2023/10/03/4, http://www.openwall.com/lists/oss-security/2023/10/03/5, http://www.openwall.com/lists/oss-security/2023/10/03/6, http://www.openwall.com/lists/oss-security/2023/10/03/8, https://access.redhat.com/downloads/content/package-browser/, https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=ec6b95c3303c700eb89eebeda2d7264cc184a796, https://access.redhat.com/security/cve/CVE-2023-5156, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5156.json, https://nvd.nist.gov/vuln/detail/CVE-2023-5156, https://security.gentoo.org/glsa/202402-01, https://bugzilla.redhat.com/show_bug.cgi?id=2240541, https://sourceware.org/bugzilla/show_bug.cgi?id=30884

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- ae37d06c7d127817ba43850f0f898b793d42aea7
    Fixed -ef321e23c20eebc6d6fb4044425c00e6df27b05f

    Affected versions

    glibc-2.38
    glibc-2.38.9000

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-5156 | CVE-DB