CVE-2023-4813 Glibc: potential use-after-free in gaih_inet()
A use-after-free flaw in glibc's gaih_inet function can cause application crashes when specific nsswitch.conf settings are used.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-4813?
CVE-2023-4813 is a medium-severity use after free vulnerability in Fedoraproject Fedora, published on 12 Sep 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.
Weakness: CWE-416
Which versions are affected by CVE-2023-4813?
It affects 16 products.
Linux distribution packages (40)
glibc-benchtests-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:2.34-100.el9 |
glibc-common-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:2.34-100.el9 |
glibc-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:2.34-100.el9 |
glibc-debugsource Red Hat:enterprise_linux:9::appstream | All versions | 0:2.34-100.el9 |
glibc-devel Red Hat:enterprise_linux:9::appstream | All versions | 0:2.34-100.el9 |
glibc-doc Red Hat:enterprise_linux:9::appstream | All versions | 0:2.34-100.el9 |
glibc-gconv-extra-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:2.34-100.el9 |
glibc-headers Red Hat:enterprise_linux:9::appstream | All versions | 0:2.34-100.el9 |
glibc-locale-source Red Hat:enterprise_linux:9::appstream | All versions | 0:2.34-100.el9 |
glibc-utils Red Hat:enterprise_linux:9::appstream | All versions | 0:2.34-100.el9 |
glibc-utils-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:2.34-100.el9 |
libnsl-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:2.34-100.el9 |
nscd-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:2.34-100.el9 |
nss_db-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:2.34-100.el9 |
nss_hesiod-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:2.34-100.el9 |
glibc Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-all-langpacks Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-benchtests-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-common Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-common-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-debugsource Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-gconv-extra Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-gconv-extra-debuginfo Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-langpack-aa Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-langpack-af Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-langpack-agr Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-langpack-ak Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-langpack-am Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-langpack-an Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-langpack-anp Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-langpack-ar Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-langpack-as Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-langpack-ast Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-langpack-ayc Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-langpack-az Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-langpack-be Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-langpack-bem Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-langpack-ber Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
glibc-langpack-bg Red Hat:enterprise_linux:9::baseos | All versions | 0:2.34-100.el9 |
Products include Fedoraproject Fedora, Gnu Glibc, Netapp Active Iq Unified Manager, Netapp H300s Firmware, Netapp H410c Firmware, Netapp H410s Firmware and 10 more.
How do I fix CVE-2023-4813?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2023-4813 being exploited?
There is no known exploitation of CVE-2023-4813 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as AZL-28829, DEBIAN-CVE-2023-4813, GHSA-qx6j-g797-jg9r, MINI-24rg-jcgw-h9w7, RHBA-2024:2413, ROOT-OS-DEBIAN-11-CVE-2023-4813 and 5 more.