Home

CVE-2016-10739

Description

In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the possibility of embedded HTTP headers or other potentially dangerous substrings.

Risk Information

Base Score
5.3
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS Score
Exploitation Probability
0.024

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2019:2118) glibc security and bug fix update glibc-2.17-292.el7.i686.rpmLinux
(RHSA-2019:2118) glibc security and bug fix update glibc-2.17-292.el7.x86_64.rpmLinux
(RHSA-2019:2118) glibc security and bug fix update glibc-common-2.17-292.el7.x86_64.rpmLinux
(RHSA-2019:2118) glibc security and bug fix update glibc-devel-2.17-292.el7.i686.rpmLinux
(RHSA-2019:2118) glibc security and bug fix update glibc-devel-2.17-292.el7.x86_64.rpmLinux
(RHSA-2019:2118) glibc security and bug fix update glibc-headers-2.17-292.el7.x86_64.rpmLinux
(RHSA-2019:2118) glibc security and bug fix update glibc-static-2.17-292.el7.i686.rpmLinux
(RHSA-2019:2118) glibc security and bug fix update glibc-static-2.17-292.el7.x86_64.rpmLinux
(RHSA-2019:2118) glibc security and bug fix update glibc-utils-2.17-292.el7.x86_64.rpmLinux
(RHSA-2019:2118) glibc security and bug fix update nscd-2.17-292.el7.x86_64.rpmLinux
Improper Input Validation Vulnerability (CVE-2016-10739)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234