Bug 847227 (CVE-2013-4458) - VUL-0: CVE-2013-4458: glibc: Stack (frame) overflow in getaddrinfo() when called with AF_INET6
Summary: VUL-0: CVE-2013-4458: glibc: Stack (frame) overflow in getaddrinfo() when cal...
Status: RESOLVED FIXED
Alias: CVE-2013-4458
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Minor
Target Milestone: ---
Assignee: Andreas Schwab
QA Contact: Security Team bot
URL:
Whiteboard: maint:released:sle11-sp3:57442 maint:...
Keywords:
Depends on:
Blocks: 941444 955181
  Show dependency treegraph
 
Reported: 2013-10-23 12:04 UTC by Victor Pereira
Modified: 2017-06-22 10:10 UTC (History)
5 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Victor Pereira 2013-10-23 12:04:11 UTC
CVE-2013-4458

A stack (frame) overflow flaw, which led to a denial of service was found in the way glibc's getaddrinfo() function processed certain requests when called with AF_INET6.  

References:
https://sourceware.org/bugzilla/show_bug.cgi?id=16072
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4458
https://bugzilla.redhat.com/show_bug.cgi?id=1022280
http://comments.gmane.org/gmane.comp.security.oss.general/11358
Comment 1 Swamp Workflow Management 2013-10-24 22:00:07 UTC
bugbot adjusting priority
Comment 2 Bernhard Wiedemann 2013-10-30 16:00:13 UTC
This is an autogenerated message for OBS integration:
This bug (847227) was mentioned in
https://build.opensuse.org/request/show/205248 Factory / glibc
Comment 7 Swamp Workflow Management 2014-06-05 19:56:28 UTC
Update released for: glibc, glibc-64bit, glibc-debuginfo, glibc-debuginfo-64bit, glibc-debugsource, glibc-devel, glibc-devel-64bit, glibc-html, glibc-i18ndata, glibc-info, glibc-locale, glibc-locale-64bit, glibc-obsolete, glibc-profile, glibc-profile-64bit, nscd
Products:
SLE-DEBUGINFO 11-SP3 (i386, ia64, ppc64, s390x, x86_64)
SLE-DESKTOP 11-SP3 (i386, x86_64)
SLE-SDK 11-SP3 (i386, x86_64)
SLE-SERVER 11-SP3 (i386, ia64, ppc64, s390x, x86_64)
SLES4VMWARE 11-SP3 (i386, x86_64)
Comment 8 Swamp Workflow Management 2014-06-05 23:04:57 UTC
SUSE-SU-2014:0760-1: An update that solves two vulnerabilities and has four fixes is now available.

Category: security (low)
Bug References: 836746,844309,847227,854445,863499,872832
CVE References: CVE-2013-4357,CVE-2013-4458
Sources used:
SUSE Linux Enterprise Software Development Kit 11 SP3 (src):    glibc-2.11.3-17.62.1
SUSE Linux Enterprise Server 11 SP3 for VMware (src):    glibc-2.11.3-17.62.1
SUSE Linux Enterprise Server 11 SP3 (src):    glibc-2.11.3-17.62.1
SUSE Linux Enterprise Desktop 11 SP3 (src):    glibc-2.11.3-17.62.1
Comment 9 Andreas Schwab 2014-07-28 10:05:54 UTC
Looks like all updates are released.
Comment 10 Andreas Schwab 2015-09-17 12:00:03 UTC
Also applicable to SLES 10.
Comment 14 Alexander Bergmann 2016-02-09 15:25:41 UTC
How to reproduce this issue:

#> seq 1 50000 | while read; do echo "127.0.0.1 test-entry" >> /etc/hosts; done
#> seq 1 50000 | while read; do echo "::1 test-entry" >> /etc/hosts; done

------------
#include <stdio.h>
#include <netdb.h>

int main(void)
{
    struct addrinfo* result;
    int error;

    error = getaddrinfo("test-entry", NULL, NULL, &result);

    return error;
}
------------

#> gcc -Wall -o CVE-2013-4458-reproducer CVE-2013-4458-reproducer.c
#> ./CVE-2013-4458-reproducer
Segmentation fault
Comment 15 Swamp Workflow Management 2016-02-16 19:16:13 UTC
SUSE-SU-2016:0470-1: An update that solves 10 vulnerabilities and has four fixes is now available.

Category: security (important)
Bug References: 830257,847227,863499,892065,918187,920338,927080,945779,950944,961721,962736,962737,962738,962739
CVE References: CVE-2013-2207,CVE-2013-4458,CVE-2014-8121,CVE-2014-9761,CVE-2015-1781,CVE-2015-7547,CVE-2015-8776,CVE-2015-8777,CVE-2015-8778,CVE-2015-8779
Sources used:
SUSE Linux Enterprise Server 11-SP2-LTSS (src):    glibc-2.11.3-17.45.66.1
SUSE Linux Enterprise Debuginfo 11-SP2 (src):    glibc-2.11.3-17.45.66.1
Comment 18 Marcus Meissner 2016-04-13 09:02:31 UTC
close