Glibc: potential use-after-free in gaih_inet()

5.9 CVSS

Vulnerability Description

A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-4813

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Red Hat

View All →

CVE-2025-9909

Aap-gateway: improper path validation in gateway allows credential exfiltration

Medium 6.7

CVE-2025-9908

Event-driven-ansible: sensitive internal headers disclosure in aap eda event streams

Medium 6.7

CVE-2025-9907

Event-driven-ansible: event stream test mode exposes sensitive headers in aap eda

Medium 6.7

CVE-2025-9901

Libsoup: improper handling of http vary header in libsoup caching

Medium 5.9

CVE-2025-9820

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

Medium 4

Affected Vendor

Red Hat

View all reports →

Affected Software

Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Virtualization 4 for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7

Vulnerable Versions:

0:2.28-225.el8_8.6, 0:2.28-189.8.el8_6, 0:2.34-100.el9, 0:2.34-60.el9_2.7