Input validation error in GNU C Library (glibc) - CVE-2013-4458
Published: February 13, 2023 / Updated: June 3, 2025
Vulnerability identifier: #VU110117
CSH Severity: Medium
CVSS v4: []
CVE-ID: CVE-2013-4458
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows remote attackers to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can cause a denial of service (crash) via a (1) hostname or (2) IP address that triggers a large number of AF_INET6 address results.
Affected software
GNU C Library (glibc)
Gentoo Linux
Slackware Linux
Fedora
glibc
glibc-i18n
glibc-profile
glibc-solibs
sys-libs/glibc
Gentoo Linux
Slackware Linux
Fedora
glibc
glibc-i18n
glibc-profile
glibc-solibs
sys-libs/glibc
How to mitigate CVE-2013-4458
Install update from vendor's website.
glibc - update to 2.17
glibc-i18n - update to 2.17
glibc-profile - update to 2.17
glibc-solibs - update to 2.17
sys-libs/glibc - update to 2.19-r1
glibc - update to 2.22-16.fc23
glibc-i18n - update to 2.17
glibc-profile - update to 2.17
glibc-solibs - update to 2.17
sys-libs/glibc - update to 2.19-r1
glibc - update to 2.22-16.fc23
External References
- https://sourceware.org/bugzilla/show_bug.cgi?id=16072
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:283
- https://sourceware.org/ml/libc-alpha/2013-10/msg00733.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:284
- http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00036.html
- https://security.gentoo.org/glsa/201503-04