Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-19591
HistoryDec 04, 2018 - 4:29 p.m.

Design/Logic Flaw

2018-12-0416:29:00
PRIOn knowledge base
www.prio-n.com
7

7.2 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.6%

In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function.

CPENameOperatorVersion
fedoraeq28
fedoraeq29
glibcle2.28