CVE-2023-4806

A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.

• CWE-416
• CWE-416

• https://access.redhat.com/errata/RHSA-2023:5453Third Party Advisory
• https://access.redhat.com/errata/RHSA-2023:5455Third Party Advisory
• https://access.redhat.com/errata/RHSA-2023:7409
• https://access.redhat.com/security/cve/CVE-2023-4806Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2237782Issue Tracking, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2023/10/03/4
• http://www.openwall.com/lists/oss-security/2023/10/03/5
• http://www.openwall.com/lists/oss-security/2023/10/03/6
• http://www.openwall.com/lists/oss-security/2023/10/03/8
• https://access.redhat.com/errata/RHSA-2023:5453Third Party Advisory
• https://access.redhat.com/errata/RHSA-2023:5455Third Party Advisory
• https://access.redhat.com/errata/RHSA-2023:7409
• https://access.redhat.com/security/cve/CVE-2023-4806Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2237782Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DBUQRRPB47TC3NJOUIBVWUGFHBJAFDL/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DFG4P76UHHZEWQ26FWBXG76N2QLKKPZA/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDAQWHTSVOCOZ5K6KPIWKRT3JX4RTZUR/
• https://security.gentoo.org/glsa/202310-03
• https://security.netapp.com/advisory/ntap-20240125-0008/
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html
• https://cert-portal.siemens.com/productcert/html/ssa-831302.html

Published

Sep 18, 2023

Last Modified

Jul 14, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-48052Missing SSL certificate validation in HTTPie v3.2.2 allows a…7.4
• CVE-2023-48053Archery v1.10.0 uses a non-random or static IV for Cipher Bl…7.5
• CVE-2023-48054Missing SSL certificate validation in localstack v2.3.2 allo…7.4
• CVE-2023-48055SuperAGI v0.0.13 was discovered to use a hardcoded key for e…7.5
• CVE-2023-48056PyPinkSign v0.5.1 uses a non-random or static IV for Cipher …7.5
• CVE-2023-48058Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Re…8.8
• CVE-2023-48060Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Re…8.8
• CVE-2023-48063An issue was discovered in dreamer_cms 4.1.3. There is a CSR…4.3
• CVE-2023-48068DedeCMS v6.2 was discovered to contain a Cross-site Scriptin…5.4
• CVE-2023-4807Issue summary: The POLY1305 MAC (message authentication code…7.8
• CVE-2023-48078SQL Injection vulnerability in add.php in Simple CRUD Functi…9.8
• CVE-2023-4808The WP Post Popup WordPress plugin through 3.7.3 does not sa…4.8