{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2026-89092 in the wild and no public exploit code.","fix":"Apply the vendor's patch.","what":"CVE-2026-89092 is a medium-severity denial of service vulnerability in The GNU C Library glibc, published on 11 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2026-89092 and fix it if it is affected.\n\nWhat it is: CVE-2026-89092 is a medium-severity denial of service vulnerability in The GNU C Library glibc, published on 11 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2026-89092 in the wild and no public exploit code.\n\nAffected product: The GNU C Library glibc. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-89092/ (Markdown: https://insights.sbomify.com/CVE-2026-89092/index.md)","id":"CVE-2026-89092","markdown":"https://insights.sbomify.com/CVE-2026-89092/index.md","name":"CVE-2026-89092","record":{"aliases":["AZL-100019","BELL-CVE-2026-89092","DEBIAN-CVE-2026-89092","ECHO-44db-d5e5-4257","GHSA-gwqp-9qgw-c5pv","OESA-2026-4280","OESA-2026-4281","OESA-2026-4282","OESA-2026-4283","UBUNTU-CVE-2026-89092"],"analysis":{"component_type":"operating_system","fix_type":"patch","impacts":["denial_of_service"],"network_reachable":"adjacent_or_local","non_default_config":true,"product_category":"GNU C Library","requires_auth":"none","summary":"A malicious DNS server can cause a stack overflow in nscd, leading to service crashes and degraded DNS resolution on systems using untrusted DNS.","user_interaction":"not_required","vuln_class":"denial_of_service"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"glibc","cpe":[],"cvss":{"score":4.2,"severity":"medium","source":"cna","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"cwes":[{"id":"CWE-789","name":"Memory Allocation with Excessive Size Value"}],"description":"The nscd service in the GNU C Library 2.3.4 onwards may crash due to a \nstack overflow when a malicious DNS server returns too large a response \nfor a DNS query, resulting in degraded DNS resolution for the system.\n\nExploitation of this bug needs a system that has nscd enabled and using \nan untrusted DNS server for name resolution, with the compromised DNS \nserver being capable of processing records large enough to result in a \nstack overflow in an nscd thread stack.  During experimentation, bind 9 \nwas unable to handle large records, but that could change in future or \nwith a different name server.  In typical installations, nscd is \nexecuted in an isolated context as its own user without a shell, due to \nwhich any compromise of that service is isolated.\n\nThere is a remote possibility of nscd cache corruption if an attacker \nmanages to get the stack pointer into a desired point in the heap, \npotentially resulting in other caches in nscd being overwritten with \ncorrupt data through the stack overflow, until the buggy code path \neventually results in a crash.\n\nFinally, a crash in nscd may result in performance degradation when \nresolving names, but it does not result in a denial of service.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"Stack overflow in nscd due to unbounded alloca use","id":"CVE-2026-89092","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"denial_of_service","year":"2026"},"n_packages":0,"n_references":2,"next":{"headline":"Better Messages \u003c= 2.15.33 - Unauthenticated Information Exposure Spoofing via 'X-Real-IP' Header via /guests/register","id":"CVE-2026-89093"},"packages":[],"prev":{"headline":"Path traversal in Migration Toolkit for Applications 8","id":"CVE-2026-89091"},"products":["glibc"],"published":"2026-09-11","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2026-09-11","vendors":["The GNU C Library"]},"summary":"A malicious DNS server can cause a stack overflow in nscd, leading to service crashes and degraded DNS resolution on systems using untrusted DNS.","url":"https://insights.sbomify.com/CVE-2026-89092/"}