Out-of-bounds read in GNU C Library (glibc) - CVE-2023-4527

Vulnerability identifier: #VU81097

CSH Severity: Medium

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-4527

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information or perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition within the getaddrinfo() function called with the AF_UNSPEC address family. A remote attacker with control over DNS server can send a DNS response via TCP larger than 2048 bytes, trigger an out-of-bounds read and crash the application or gain access to potentially sensitive information.

Successful exploitation of the vulnerability requires that system is configured with no-aaaa mode via /etc/resolv.conf.

GNU C Library (glibc)
Gentoo Linux
Debian Linux
Amazon Linux AMI
Oracle Linux
Red Hat Enterprise Linux for IBM z Systems
Anolis OS
Red Hat Enterprise Linux for Power, little endian
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Ubuntu
Fedora
Migration Toolkit for Runtimes
Service Interconnect
Fence Agents Remediation Operator
Run Once Duration Override Operator for Red Hat OpenShift
Red Hat OpenShift Kernel Module Management
OpenShift Pipelines
cert-manager Operator for Red Hat OpenShift
Cryostat
Ansible Automation Platform
Migration Toolkit for Virtualization
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Advanced Cluster Security for Kubernetes
OpenShift Logging
Red Hat Migration Toolkit for Applications
Red Hat OpenStack
IBM MQ Operator
IBM Cloud Transformation Advisor
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Security Verify Governance
IBM Robotic Process Automation
Cost Management
Node Health Check Operator
Self Node Remediation Operator
Red Hat OpenShift Serverless
Multicluster Engine for Kubernetes
OpenShift Service Mesh
OpenShift Virtualization
Node Maintenance Operator
OpenShift Data Foundation (formerly OpenShift Container Storage)
OpenShift API for Data Protection (OADP)
Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
Network Observability plugin for the Openshift Console
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
Red Hat Process Automation Manager (formerly JBoss BPM Suite)
IBM Business Automation Manager Open Editions
webMethods Managed File Transfer
Cloud Pak for Network Automation
Watson Studio on Cloud Pak for Data - Execution Engine for Apache Hadoop
Storage Ceph
IBM supplied MQ Advanced container images
IBM Sterling Order Management
Robotic Process Automation for Cloud Pak
IBM Security Guardium
glibc (Red Hat package)
glibc-langpack-mn
glibc-langpack-mk
glibc-langpack-mjw
glibc-langpack-miq
glibc-langpack-mi
glibc-langpack-mhr
glibc-langpack-mfe
glibc-langpack-mg
glibc-langpack-nl
glibc-langpack-sl
glibc-langpack-pt
glibc-langpack-ps
glibc-langpack-pl
glibc-langpack-pap
glibc-langpack-pa
glibc-langpack-os
glibc-langpack-or
glibc-langpack-om
glibc-langpack-oc
glibc-langpack-nso
glibc-langpack-nr
glibc-langpack-nn
glibc-langpack-ml
glibc-langpack-niu
glibc-langpack-nhn
glibc-langpack-ne
glibc-langpack-nds
glibc-langpack-nb
glibc-langpack-nan
glibc-langpack-my
glibc-langpack-mt
glibc-langpack-ms
glibc-langpack-mr
glibc-langpack-mni
glibc-langpack-quz
glibc-langpack-ik
glibc-langpack-kl
glibc-langpack-kk
glibc-langpack-kab
glibc-langpack-ka
glibc-langpack-ja
glibc-langpack-iu
glibc-langpack-it
glibc-langpack-is
glibc-langpack-km
glibc-langpack-ig
glibc-langpack-id
glibc-langpack-ia
glibc-langpack-hy
glibc-langpack-hu
glibc-langpack-ht
glibc-langpack-hsb
glibc-langpack-hr
glibc-langpack-lg
glibc-langpack-mag
glibc-langpack-lzh
glibc-langpack-lv
glibc-langpack-lt
glibc-langpack-lo
glibc-langpack-ln
glibc-langpack-lij
glibc-langpack-li
glibc-langpack-mai
glibc-langpack-lb
glibc-langpack-ky
glibc-langpack-kw
glibc-langpack-ku
glibc-langpack-ks
glibc-langpack-kok
glibc-langpack-ko
glibc-langpack-kn
glibc-langpack-unm
glibc-langpack-wo
glibc-langpack-wal
glibc-langpack-wae
glibc-langpack-wa
glibc-langpack-vi
glibc-langpack-ve
glibc-langpack-uz
glibc-langpack-ur
glibc-langpack-xh
glibc-langpack-uk
glibc-langpack-ug
glibc-langpack-tt
glibc-langpack-ts
glibc-langpack-tr
glibc-langpack-tpi
glibc-langpack-to
glibc-langpack-tn
glibc-minimal-langpack
glibc-doc
nss_hesiod
nss_db
nscd
libnsl
glibc-utils
glibc-static
glibc-nss-devel
glibc-langpack-tl
glibc-locale-source
glibc-langpack-zu
glibc-langpack-zh
glibc-langpack-yuw
glibc-langpack-yue
glibc-langpack-yo
glibc-langpack-yi
glibc-langpack-se
glibc-langpack-sm
glibc-langpack-fil
glibc-langpack-sk
glibc-langpack-sid
glibc-langpack-si
glibc-langpack-shs
glibc-langpack-shn
glibc-langpack-sgs
glibc-langpack-so
glibc-langpack-sd
glibc-langpack-sc
glibc-langpack-sat
glibc-langpack-sah
glibc-langpack-sa
glibc-langpack-rw
glibc-langpack-ru
glibc-langpack-ro
glibc-langpack-ta
glibc-langpack-tk
glibc-langpack-tig
glibc-langpack-ti
glibc-langpack-the
glibc-langpack-th
glibc-langpack-tg
glibc-langpack-te
glibc-langpack-tcy
glibc-langpack-raj
glibc-langpack-szl
glibc-langpack-sw
glibc-langpack-sv
glibc-langpack-st
glibc-langpack-ss
glibc-langpack-sr
glibc-langpack-sq
glibc-langpack-bn
glibc-langpack-ayc
glibc-langpack-az
glibc-langpack-be
glibc-langpack-bem
glibc-langpack-ber
glibc-langpack-bg
glibc-langpack-bhb
glibc-langpack-bho
glibc-langpack-bi
glibc-langpack-ast
glibc-langpack-bo
glibc-langpack-br
glibc-langpack-brx
glibc-langpack-bs
glibc-langpack-byn
glibc-langpack-ca
glibc-langpack-ce
glibc-langpack-chr
glibc-langpack-aa
compat-libpthread-nonshared
glibc
glibc-all-langpacks
glibc-benchtests
glibc-common
glibc-devel
glibc-gconv-extra
glibc-headers
glibc-langpack-hif
glibc-langpack-af
glibc-langpack-agr
glibc-langpack-ak
glibc-langpack-am
glibc-langpack-an
glibc-langpack-anp
glibc-langpack-ar
glibc-langpack-as
glibc-langpack-gez
glibc-langpack-ff
glibc-langpack-fi
glibc-langpack-cmn
glibc-langpack-fo
glibc-langpack-fr
glibc-langpack-fur
glibc-langpack-fy
glibc-langpack-ga
glibc-langpack-gd
glibc-langpack-crh
glibc-langpack-gl
glibc-langpack-gu
glibc-langpack-gv
glibc-langpack-ha
glibc-langpack-hak
glibc-langpack-he
glibc-langpack-hi
glibc-langpack-hne
glibc-langpack-eu
glibc-langpack-cs
glibc-langpack-csb
glibc-langpack-cv
glibc-langpack-cy
glibc-langpack-da
glibc-langpack-de
glibc-langpack-doi
glibc-langpack-dsb
glibc-langpack-dv
glibc-langpack-dz
glibc-langpack-el
glibc-langpack-en
glibc-langpack-eo
glibc-langpack-es
glibc-langpack-et
glibc-langpack-fa
glibc (Debian package)
libc6 (Ubuntu package)
sys-libs/glibc
rhel-- (Red Hat package)

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Migration Toolkit for Runtimes - update to 1.2.1
Fence Agents Remediation Operator - update to 0.2.1
Node Health Check Operator - addressed in versions 0.4.1, 0.6.1
Self Node Remediation Operator - addressed in versions 0.5.1, 0.7.1
Run Once Duration Override Operator for Red Hat OpenShift - update to 1.0.1
Red Hat OpenShift Serverless - update to 1.30.2
OpenShift API for Data Protection (OADP) - update to 1.0.14
Red Hat OpenShift Kernel Module Management - update to 1.1.2
Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - addressed in versions 1.1.3, 1.2.0
Migration Toolkit for Containers - addressed in versions 1.7.14, 1.8.1
OpenShift Pipelines - addressed in versions 1.10.6, 1.11.2, 1.12.1
cert-manager Operator for Red Hat OpenShift - update to 1.12.1
Multicluster Engine for Kubernetes - addressed in versions 2.1.9, 2.2.9, 2.3.3
OpenShift Service Mesh - addressed in versions 2.2.11, 2.3.8, 2.4.4
Migration Toolkit for Virtualization - addressed in versions 2.4.3, 2.5.2
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.6.8, 2.7.9, 2.8.3
Red Hat Advanced Cluster Security for Kubernetes - addressed in versions 3.74.7, 4.0.5, 4.1.4, 4.2.2
OpenShift Virtualization - addressed in versions 4.11.7, 4.12.8, 4.13.5
Red Hat OpenShift Container Platform - addressed in versions 4.12.39, 4.13.17, 4.14.0
Node Maintenance Operator - addressed in versions 5.0.1, 5.2.1
OpenShift Logging - addressed in versions 5.5.17, 5.6.12, 5.7.7
Red Hat Migration Toolkit for Applications - addressed in versions 6.1.4, 6.2.1
Red Hat Process Automation Manager (formerly JBoss BPM Suite) - update to 7.13.4 SP1
IBM Business Automation Manager Open Editions - update to 8.0.4 IF001
Red Hat OpenStack - addressed in versions 16.2.5, 17.1.1
IBM MQ Operator - addressed in versions 2.0.16, 2.4.4
Cloud Pak for Network Automation - update to 2.6.4
glibc (Red Hat package) - addressed in versions 2.28-225.el8_8.6, 2.34-60.el9_2.7
glibc-langpack-mn - update to 2.28-225.0.4
glibc-langpack-mk - update to 2.28-225.0.4
glibc-langpack-mjw - update to 2.28-225.0.4
glibc-langpack-miq - update to 2.28-225.0.4
glibc-langpack-mi - update to 2.28-225.0.4
glibc-langpack-mhr - update to 2.28-225.0.4
glibc-langpack-mfe - update to 2.28-225.0.4
glibc-langpack-mg - update to 2.28-225.0.4
glibc-langpack-nl - update to 2.28-225.0.4
glibc-langpack-sl - update to 2.28-225.0.4
glibc-langpack-pt - update to 2.28-225.0.4
glibc-langpack-ps - update to 2.28-225.0.4
glibc-langpack-pl - update to 2.28-225.0.4
glibc-langpack-pap - update to 2.28-225.0.4
glibc-langpack-pa - update to 2.28-225.0.4
glibc-langpack-os - update to 2.28-225.0.4
glibc-langpack-or - update to 2.28-225.0.4
glibc-langpack-om - update to 2.28-225.0.4
glibc-langpack-oc - update to 2.28-225.0.4
glibc-langpack-nso - update to 2.28-225.0.4
glibc-langpack-nr - update to 2.28-225.0.4
glibc-langpack-nn - update to 2.28-225.0.4
glibc-langpack-ml - update to 2.28-225.0.4
glibc-langpack-niu - update to 2.28-225.0.4
glibc-langpack-nhn - update to 2.28-225.0.4
glibc-langpack-ne - update to 2.28-225.0.4
glibc-langpack-nds - update to 2.28-225.0.4
glibc-langpack-nb - update to 2.28-225.0.4
glibc-langpack-nan - update to 2.28-225.0.4
glibc-langpack-my - update to 2.28-225.0.4
glibc-langpack-mt - update to 2.28-225.0.4
glibc-langpack-ms - update to 2.28-225.0.4
glibc-langpack-mr - update to 2.28-225.0.4
glibc-langpack-mni - update to 2.28-225.0.4
glibc-langpack-quz - update to 2.28-225.0.4
glibc-langpack-ik - update to 2.28-225.0.4
glibc-langpack-kl - update to 2.28-225.0.4
glibc-langpack-kk - update to 2.28-225.0.4
glibc-langpack-kab - update to 2.28-225.0.4
glibc-langpack-ka - update to 2.28-225.0.4
glibc-langpack-ja - update to 2.28-225.0.4
glibc-langpack-iu - update to 2.28-225.0.4
glibc-langpack-it - update to 2.28-225.0.4
glibc-langpack-is - update to 2.28-225.0.4
glibc-langpack-km - update to 2.28-225.0.4
glibc-langpack-ig - update to 2.28-225.0.4
glibc-langpack-id - update to 2.28-225.0.4
glibc-langpack-ia - update to 2.28-225.0.4
glibc-langpack-hy - update to 2.28-225.0.4
glibc-langpack-hu - update to 2.28-225.0.4
glibc-langpack-ht - update to 2.28-225.0.4
glibc-langpack-hsb - update to 2.28-225.0.4
glibc-langpack-hr - update to 2.28-225.0.4
glibc-langpack-lg - update to 2.28-225.0.4
glibc-langpack-mag - update to 2.28-225.0.4
glibc-langpack-lzh - update to 2.28-225.0.4
glibc-langpack-lv - update to 2.28-225.0.4
glibc-langpack-lt - update to 2.28-225.0.4
glibc-langpack-lo - update to 2.28-225.0.4
glibc-langpack-ln - update to 2.28-225.0.4
glibc-langpack-lij - update to 2.28-225.0.4
glibc-langpack-li - update to 2.28-225.0.4
glibc-langpack-mai - update to 2.28-225.0.4
glibc-langpack-lb - update to 2.28-225.0.4
glibc-langpack-ky - update to 2.28-225.0.4
glibc-langpack-kw - update to 2.28-225.0.4
glibc-langpack-ku - update to 2.28-225.0.4
glibc-langpack-ks - update to 2.28-225.0.4
glibc-langpack-kok - update to 2.28-225.0.4
glibc-langpack-ko - update to 2.28-225.0.4
glibc-langpack-kn - update to 2.28-225.0.4
glibc-langpack-unm - update to 2.28-225.0.4
glibc-langpack-wo - update to 2.28-225.0.4
glibc-langpack-wal - update to 2.28-225.0.4
glibc-langpack-wae - update to 2.28-225.0.4
glibc-langpack-wa - update to 2.28-225.0.4
glibc-langpack-vi - update to 2.28-225.0.4
glibc-langpack-ve - update to 2.28-225.0.4
glibc-langpack-uz - update to 2.28-225.0.4
glibc-langpack-ur - update to 2.28-225.0.4
glibc-langpack-xh - update to 2.28-225.0.4
glibc-langpack-uk - update to 2.28-225.0.4
glibc-langpack-ug - update to 2.28-225.0.4
glibc-langpack-tt - update to 2.28-225.0.4
glibc-langpack-ts - update to 2.28-225.0.4
glibc-langpack-tr - update to 2.28-225.0.4
glibc-langpack-tpi - update to 2.28-225.0.4
glibc-langpack-to - update to 2.28-225.0.4
glibc-langpack-tn - update to 2.28-225.0.4
glibc-minimal-langpack - addressed in versions 2.28-225.0.4, 2.36-10
glibc-doc - addressed in versions 2.28-225.0.4, 2.36-10
nss_hesiod - addressed in versions 2.28-225.0.4, 2.36-10
nss_db - addressed in versions 2.28-225.0.4, 2.36-10
nscd - update to 2.28-225.0.4
libnsl - addressed in versions 2.28-225.0.4, 2.36-10
glibc-utils - addressed in versions 2.28-225.0.4, 2.36-10
glibc-static - addressed in versions 2.28-225.0.4, 2.36-10
glibc-nss-devel - addressed in versions 2.28-225.0.4, 2.36-10
glibc-langpack-tl - update to 2.28-225.0.4
glibc-locale-source - addressed in versions 2.28-225.0.4, 2.36-10
glibc-langpack-zu - update to 2.28-225.0.4
glibc-langpack-zh - addressed in versions 2.28-225.0.4, 2.36-10
glibc-langpack-yuw - update to 2.28-225.0.4
glibc-langpack-yue - update to 2.28-225.0.4
glibc-langpack-yo - update to 2.28-225.0.4
glibc-langpack-yi - update to 2.28-225.0.4
glibc-langpack-se - update to 2.28-225.0.4
glibc-langpack-sm - update to 2.28-225.0.4
glibc-langpack-fil - update to 2.28-225.0.4
glibc-langpack-sk - update to 2.28-225.0.4
glibc-langpack-sid - update to 2.28-225.0.4
glibc-langpack-si - update to 2.28-225.0.4
glibc-langpack-shs - update to 2.28-225.0.4
glibc-langpack-shn - update to 2.28-225.0.4
glibc-langpack-sgs - update to 2.28-225.0.4
glibc-langpack-so - update to 2.28-225.0.4
glibc-langpack-sd - update to 2.28-225.0.4
glibc-langpack-sc - update to 2.28-225.0.4
glibc-langpack-sat - update to 2.28-225.0.4
glibc-langpack-sah - update to 2.28-225.0.4
glibc-langpack-sa - update to 2.28-225.0.4
glibc-langpack-rw - update to 2.28-225.0.4
glibc-langpack-ru - update to 2.28-225.0.4
glibc-langpack-ro - update to 2.28-225.0.4
glibc-langpack-ta - update to 2.28-225.0.4
glibc-langpack-tk - update to 2.28-225.0.4
glibc-langpack-tig - update to 2.28-225.0.4
glibc-langpack-ti - update to 2.28-225.0.4
glibc-langpack-the - update to 2.28-225.0.4
glibc-langpack-th - update to 2.28-225.0.4
glibc-langpack-tg - update to 2.28-225.0.4
glibc-langpack-te - update to 2.28-225.0.4
glibc-langpack-tcy - update to 2.28-225.0.4
glibc-langpack-raj - update to 2.28-225.0.4
glibc-langpack-szl - update to 2.28-225.0.4
glibc-langpack-sw - update to 2.28-225.0.4
glibc-langpack-sv - update to 2.28-225.0.4
glibc-langpack-st - update to 2.28-225.0.4
glibc-langpack-ss - update to 2.28-225.0.4
glibc-langpack-sr - update to 2.28-225.0.4
glibc-langpack-sq - update to 2.28-225.0.4
glibc-langpack-bn - update to 2.28-225.0.4
glibc-langpack-ayc - update to 2.28-225.0.4
glibc-langpack-az - update to 2.28-225.0.4
glibc-langpack-be - update to 2.28-225.0.4
glibc-langpack-bem - update to 2.28-225.0.4
glibc-langpack-ber - update to 2.28-225.0.4
glibc-langpack-bg - update to 2.28-225.0.4
glibc-langpack-bhb - update to 2.28-225.0.4
glibc-langpack-bho - update to 2.28-225.0.4
glibc-langpack-bi - update to 2.28-225.0.4
glibc-langpack-ast - update to 2.28-225.0.4
glibc-langpack-bo - update to 2.28-225.0.4
glibc-langpack-br - update to 2.28-225.0.4
glibc-langpack-brx - update to 2.28-225.0.4
glibc-langpack-bs - update to 2.28-225.0.4
glibc-langpack-byn - update to 2.28-225.0.4
glibc-langpack-ca - update to 2.28-225.0.4
glibc-langpack-ce - update to 2.28-225.0.4
glibc-langpack-chr - update to 2.28-225.0.4
glibc-langpack-aa - update to 2.28-225.0.4
compat-libpthread-nonshared - addressed in versions 2.28-225.0.4, 2.36-10
glibc - addressed in versions 2.28-225.0.4, 2.36-10
glibc-all-langpacks - addressed in versions 2.28-225.0.4, 2.36-10
glibc-benchtests - addressed in versions 2.28-225.0.4, 2.36-10
glibc-common - addressed in versions 2.28-225.0.4, 2.36-10
glibc-devel - addressed in versions 2.28-225.0.4, 2.36-10
glibc-gconv-extra - addressed in versions 2.28-225.0.4, 2.36-10
glibc-headers - update to 2.28-225.0.4
glibc-langpack-hif - update to 2.28-225.0.4
glibc-langpack-af - update to 2.28-225.0.4
glibc-langpack-agr - update to 2.28-225.0.4
glibc-langpack-ak - update to 2.28-225.0.4
glibc-langpack-am - update to 2.28-225.0.4
glibc-langpack-an - update to 2.28-225.0.4
glibc-langpack-anp - update to 2.28-225.0.4
glibc-langpack-ar - update to 2.28-225.0.4
glibc-langpack-as - update to 2.28-225.0.4
glibc-langpack-gez - update to 2.28-225.0.4
glibc-langpack-ff - update to 2.28-225.0.4
glibc-langpack-fi - update to 2.28-225.0.4
glibc-langpack-cmn - update to 2.28-225.0.4
glibc-langpack-fo - update to 2.28-225.0.4
glibc-langpack-fr - update to 2.28-225.0.4
glibc-langpack-fur - update to 2.28-225.0.4
glibc-langpack-fy - update to 2.28-225.0.4
glibc-langpack-ga - update to 2.28-225.0.4
glibc-langpack-gd - update to 2.28-225.0.4
glibc-langpack-crh - update to 2.28-225.0.4
glibc-langpack-gl - update to 2.28-225.0.4
glibc-langpack-gu - update to 2.28-225.0.4
glibc-langpack-gv - update to 2.28-225.0.4
glibc-langpack-ha - update to 2.28-225.0.4
glibc-langpack-hak - update to 2.28-225.0.4
glibc-langpack-he - update to 2.28-225.0.4
glibc-langpack-hi - update to 2.28-225.0.4
glibc-langpack-hne - update to 2.28-225.0.4
glibc-langpack-eu - update to 2.28-225.0.4
glibc-langpack-cs - update to 2.28-225.0.4
glibc-langpack-csb - update to 2.28-225.0.4
glibc-langpack-cv - update to 2.28-225.0.4
glibc-langpack-cy - update to 2.28-225.0.4
glibc-langpack-da - update to 2.28-225.0.4
glibc-langpack-de - update to 2.28-225.0.4
glibc-langpack-doi - update to 2.28-225.0.4
glibc-langpack-dsb - update to 2.28-225.0.4
glibc-langpack-dv - update to 2.28-225.0.4
glibc-langpack-dz - update to 2.28-225.0.4
glibc-langpack-el - update to 2.28-225.0.4
glibc-langpack-en - addressed in versions 2.28-225.0.4, 2.36-10
glibc-langpack-eo - update to 2.28-225.0.4
glibc-langpack-es - update to 2.28-225.0.4
glibc-langpack-et - update to 2.28-225.0.4
glibc-langpack-fa - update to 2.28-225.0.4
glibc (Debian package) - addressed in versions 2.31-13+deb11u7, 2.36-9+deb12u3
glibc - update to 2.34-52
libc6 (Ubuntu package) - addressed in versions 2.35-0ubuntu3.4, 2.37-0ubuntu2.1
glibc - addressed in versions 2.36-14.fc37, 2.37-10.fc38, 2.38-6.fc39
sys-libs/glibc - update to 2.37-r7
IBM Cloud Transformation Advisor - update to 3.10.0
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.4
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.14.0
Watson Studio on Cloud Pak for Data - Execution Engine for Apache Hadoop - update to 5.0.3
Storage Ceph - update to 6.1z2
rhel-- (Red Hat package) - addressed in versions 8/aarch64/7436/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6, 8/x86_64/7418/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6, 8.8/s390x/9193/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6, 8.8/x86_64/9181/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6, 8.8/x86_64/9407/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6
IBM supplied MQ Advanced container images - addressed in versions 9.3.0.11-r1, 9.3.3.2-r1
IBM Security Verify Governance - update to 10.0.2.0.4
IBM Sterling Order Management - update to 10.0.2403.1
IBM Robotic Process Automation - addressed in versions 21.0.7.18, 23.0.18
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.18, 23.0.18

• https://bugzilla.redhat.com/show_bug.cgi?id=2234712
• https://sourceware.org/bugzilla/show_bug.cgi?id=30842

• Denial of service in GNU glibc
• Ubuntu update for glibc
• Debian update for glibc
• Fedora 39 update for glibc
• Fedora 37 update for glibc
• Fedora 38 update for glibc
• Red Hat Enterprise Linux 8 update for glibc
• Red Hat Enterprise Linux 9 update for glibc
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1.2
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.1
• Multiple vulnerabilities in Red Hat OpenStack Platform 16.2
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh for 2.4
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.3
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.2
• Multiple vulnerabilities in Logging Subsystem 5.6 for Red Hat OpenShift
• Multiple vulnerabilities in Logging Subsystem 5.7 for Red Hat OpenShift
• Multiple vulnerabilities in Network Observability plugin for the Openshift Console
• Multiple vulnerabilities in Red Hat OpenStack Platform 17
• Multiple vulnerabilities in Red Hat Ansible Automation Platform 2.4
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.5
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.7
• Multiple vulnerabilities in Red Hat Node Maintenance Operator 5.2
• Multiple vulnerabilities in Red Hat Node Maintenance Operator 5.0
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.0
• Multiple vulnerabilities in Logging Subsystem 5.5 for Red Hat OpenShift
• Multiple vulnerabilities in Cost Management for RHEL 8
• Multiple vulnerabilities in Cryostat 2 on RHEL 8
• Multiple vulnerabilities in Red Hat OpenShift Pipelines 1.12
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.2
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 3.74
• Multiple vulnerabilities in Red Hat Process Automation Manager 7.13
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC) 1.8
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.3
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.0
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.1
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.6
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC) 1.7
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.1
• Multiple vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift 1.2
• Multiple vulnerabilities in OpenShift Virtualization 4.13
• Multiple vulnerabilities in Red Hat OpenShift Virtualization release 4.11
• Multiple vulnerabilities in OpenShift Virtualization 4.12
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.7
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.8
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.2
• Multiple vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift 1.1
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1 on RHEL 8
• Multiple vulnerabilities in Run Once Duration Override Operator for Red Hat OpenShift
• Multiple vulnerabilities in Red Hat Service Interconnect for RHEL 9
• Multiple vulnerabilities in Migration Toolkit for Applications 6.2
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• Multiple vulnerabilities in Node Health Check Operator 0.6
• Multiple vulnerabilities in Node Health Check Operator 0.4
• Multiple vulnerabilities in Fence Agents Remediation Operator
• Multiple vulnerabilities in Migration Toolkit for Applications 6.1
• Multiple vulnerabilities in Red Hat OpenShift Pipelines 1.11
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.4
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in cert-manager Operator for Red Hat OpenShift 1.12
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.14
• Multiple vulnerabilities in Red Hat OpenShift Kernel Module Management 1.1
• Multiple security vulnerabilities in IBM Business Automation Manager Open Editions
• Multiple vulnerabilities in Red Hat OpenShift Pipelines 1.10
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.5
• Multiple vulnerabilities in IBM Cloud Pak for Network Automation
• State issues in IBM Storage Ceph
• Multiple vulnerabilities in IBM Security Guardium
• Gentoo update for glibc
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM Sterling Order Management
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Multiple vulnerabilities in IBM Security Verify Governance - Identity Manager
• Multiple vulnerabilities in IBM Robotic Process Automation
• Multiple vulnerabilities in IBM Watson Studio on Cloud Pak for Data - Execution Engine for Apache Hadoop
• Amazon Linux AMI update for glibc
• Anolis OS update for glibc
• Anolis OS update for glibc
• Multiple vulnerabilities in IBM webMethods Managed File Transfer