CVE - CVE-2013-4458

CVE-ID
CVE-2013-4458	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
It was found that getaddrinfo() did not limit the amount of stack memory used during name resolution. An attacker able to make an application resolve an attacker-controlled hostname or IP address could possibly cause the application to exhaust all stack memory and crash.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:GLSA-201503-04 URL:https://security.gentoo.org/glsa/201503-04 MISC:MDVSA-2013:283 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:283 MISC:MDVSA-2013:284 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:284 MISC:RHBZ#1022280 URL:https://bugzilla.redhat.com/show_bug.cgi?id=1022280 MISC:RHSA-2014:1391 URL:https://access.redhat.com/errata/RHSA-2014:1391 MISC:SUSE-SU-2016:0470 URL:http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html MISC:[libc-alpha] 20131022 [PATCH][BZ #16072] Fix stack overflow due to large AF_INET6 requests URL:https://sourceware.org/ml/libc-alpha/2013-10/msg00733.html MISC:https://access.redhat.com/security/cve/CVE-2013-4458 URL:https://access.redhat.com/security/cve/CVE-2013-4458 MISC:https://sourceware.org/bugzilla/show_bug.cgi?id=16072 URL:https://sourceware.org/bugzilla/show_bug.cgi?id=16072
Assigning CNA
Red Hat, Inc.
Date Record Created
20130612	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20130612)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is a record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)