VulnSocial

CVE-2023-4806Disclosure(fedoraproject / codeready_linux_builder_eus)

LOWCVSS 5.9 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been identified in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.

fedoraproject CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • codeready_linux_builder_eus
  • codeready_linux_builder_eus_for_power_little_endian
  • codeready_linux_builder_eus_for_power_little_endian_eus
  • codeready_linux_builder_for_arm64

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
fedoraprojectgnuredhat
Products
codeready_linux_builder_euscodeready_linux_builder_eus_for_power_little_endiancodeready_linux_builder_eus_for_power_little_endian_euscodeready_linux_builder_for_arm64codeready_linux_builder_for_arm64_euscodeready_linux_builder_for_ibm_z_systemscodeready_linux_builder_for_ibm_z_systems_eusenterprise_linuxenterprise_linux_eusenterprise_linux_for_arm_64

19 versions affected across 22 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-18: 1Technical Details · 2026-02-18: 102-18
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • ThreatCluster@threatcluster
    Disclosure

    Glibc getaddrinfo is affected by 3 CVEs: CVE-2023-4806 use-after-free, CVE-2023-4527 stack read overflow, CVE-2023-5156 DoS via memory leak, disclosed Feb 18 2026. #Vulnerabilities https://threatcluster.io/cluster/multiple-cves-identified-in-glibcs-getaddrinfo-function-2faedf7a

    Post summary

    Three CVEs affecting glibc's getaddrinfo—CVE‑2023‑4806 (use‑after‑free), CVE‑2023‑4527 (stack read overflow), and CVE‑2023‑5156 (DoS via memory leak)—were disclosed on Feb 18, 2026.

    0000072
    71 followersView on X
CPE platform detail29 entries

29 of 29 entries

PartVendorProductVersionTarget SWTarget HW
OSfedoraprojectfedora37--
OSfedoraprojectfedora38--
OSfedoraprojectfedora39--
Appgnuglibc2.33--
Appredhatcodeready_linux_builder_eus9.2--
Appredhatcodeready_linux_builder_eus_for_power_little_endian9.0_ppc64le--
Appredhatcodeready_linux_builder_eus_for_power_little_endian_eus9.2_ppc64le--
Appredhatcodeready_linux_builder_for_arm649.0_aarch64--
Appredhatcodeready_linux_builder_for_arm64_eus9.2_aarch64--
Appredhatcodeready_linux_builder_for_ibm_z_systems9.0_s390x--
Appredhatcodeready_linux_builder_for_ibm_z_systems_eus9.2_s390x--
OSredhatenterprise_linux7.0--
OSredhatenterprise_linux8.0--
OSredhatenterprise_linux9.0--
OSredhatenterprise_linux_eus8.8--
OSredhatenterprise_linux_eus9.2--
OSredhatenterprise_linux_for_arm_649.0_aarch64--
OSredhatenterprise_linux_for_arm_64_eus9.2_aarch64--
OSredhatenterprise_linux_for_ibm_z_systems8.0_s390x--
OSredhatenterprise_linux_for_ibm_z_systems_eus8.8_s390x--
OSredhatenterprise_linux_for_ibm_z_systems_eus_s390x9.2--
OSredhatenterprise_linux_for_ibm_z_systems_s390x9.2--
OSredhatenterprise_linux_for_power_little_endian8.0_ppc64le--
OSredhatenterprise_linux_for_power_little_endian9.2_ppc64le--
OSredhatenterprise_linux_for_power_little_endian_eus8.8_ppc64le--
OSredhatenterprise_linux_for_power_little_endian_eus9.2_ppc64le--
OSredhatenterprise_linux_server_aus9.2--
OSredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions9.2_ppc64le--
OSredhatenterprise_linux_tus8.8--

Explore more

Back to dashboardfedoraproject CVEsgnu CVEsredhat CVEscodeready_linux_builder_eus vulnerabilities