Use-after-free in GNU C Library (glibc) - CVE-2023-4806

Vulnerability identifier: #VU81447

CSH Severity: Medium

CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-4806

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows an attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the getaddrinfo() function. A remote attacker can perform a denial of service (DoS) attack.

GNU C Library (glibc)
Debian Linux
Gentoo Linux
Oracle Linux
Amazon Linux AMI
Anolis OS
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Server - AUS
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Ubuntu
openEuler
Fedora
Service Interconnect
Migration Toolkit for Runtimes
Fence Agents Remediation Operator
Run Once Duration Override Operator for Red Hat OpenShift
Red Hat OpenShift Kernel Module Management
Service Telemetry Framework
OpenShift Pipelines
cert-manager Operator for Red Hat OpenShift
Cryostat
Migration Toolkit for Virtualization
Ansible Automation Platform
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Advanced Cluster Security for Kubernetes
OpenShift Logging
Red Hat Migration Toolkit for Applications
Red Hat OpenStack
IBM MQ Operator
IBM Security Verify Governance
IBM Robotic Process Automation
Juniper Cloud Native Router
Cost Management
IBM Integrated Analytics System
Node Health Check Operator
Self Node Remediation Operator
Red Hat OpenShift Serverless
Multicluster Engine for Kubernetes
OpenShift Service Mesh
OpenShift Virtualization
Node Maintenance Operator
OpenShift Data Foundation (formerly OpenShift Container Storage)
OpenShift API for Data Protection (OADP)
Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
Network Observability plugin for the Openshift Console
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
IBM Qradar SIEM
Red Hat Process Automation Manager (formerly JBoss BPM Suite)
IBM Business Automation Manager Open Editions
webMethods Managed File Transfer
Cloud Pak for Network Automation
IBM Cloud Pak for Watson AIOps
Storage Ceph
IBM supplied MQ Advanced container images
IBM Sterling Order Management
Robotic Process Automation for Cloud Pak
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libc6 (Ubuntu package)
libc-bin (Ubuntu package)
nscd
glibc-benchtests
glibc-debugsource
glibc-locale-source
glibc-debuginfo
glibc-debugutils
glibc-compat-2.17
libnsl
nss_modules
glibc
glibc-all-langpacks
glibc-devel
glibc-nss-devel
glibc-common
glibc-help
glibc (Red Hat package)
glibc-langpack-nso
glibc-langpack-pa
glibc-langpack-os
glibc-langpack-or
glibc-langpack-mhr
glibc-langpack-om
glibc-langpack-mi
glibc-langpack-miq
glibc-langpack-mjw
glibc-langpack-mk
glibc-langpack-oc
glibc-langpack-ml
glibc-langpack-mn
glibc-langpack-mni
glibc-langpack-ms
glibc-langpack-nr
glibc-langpack-nn
glibc-langpack-nl
glibc-langpack-kw
glibc-langpack-niu
glibc-langpack-nhn
glibc-langpack-mr
glibc-langpack-ne
glibc-langpack-nds
glibc-langpack-nb
glibc-langpack-nan
glibc-langpack-my
glibc-langpack-mt
glibc-langpack-hsb
glibc-langpack-ja
glibc-langpack-iu
glibc-langpack-it
glibc-langpack-is
glibc-langpack-ik
glibc-langpack-ig
glibc-langpack-id
glibc-langpack-ia
glibc-langpack-hy
glibc-langpack-hu
glibc-langpack-ht
glibc-langpack-ka
glibc-langpack-hr
glibc-langpack-hne
glibc-langpack-hif
glibc-langpack-hi
glibc-langpack-he
glibc-langpack-hak
glibc-langpack-ha
glibc-langpack-gv
glibc-langpack-gu
glibc-langpack-gl
glibc-langpack-cmn
glibc-langpack-lb
glibc-langpack-mfe
glibc-langpack-mai
glibc-langpack-mag
glibc-langpack-lzh
glibc-langpack-lv
glibc-langpack-lt
glibc-langpack-lo
glibc-langpack-ln
glibc-langpack-lij
glibc-langpack-li
glibc-langpack-lg
glibc-langpack-mg
glibc-langpack-ky
glibc-langpack-gez
glibc-langpack-ku
glibc-langpack-ks
glibc-langpack-kok
glibc-langpack-ko
glibc-langpack-kn
glibc-langpack-km
glibc-langpack-kl
glibc-langpack-kk
glibc-langpack-kab
glibc-langpack-tt
glibc-langpack-wae
glibc-langpack-wa
glibc-langpack-vi
glibc-langpack-ve
glibc-langpack-uz
glibc-langpack-ur
glibc-langpack-unm
glibc-langpack-uk
glibc-langpack-ug
glibc-langpack-wal
glibc-langpack-ts
glibc-langpack-tr
glibc-langpack-tpi
glibc-langpack-to
glibc-langpack-tn
glibc-langpack-tl
glibc-langpack-tk
glibc-langpack-tig
glibc-doc
nss_hesiod
nss_db
glibc-utils
glibc-static
glibc-minimal-langpack
glibc-langpack-ti
glibc-langpack-zu
glibc-langpack-zh
glibc-langpack-yuw
glibc-langpack-yue
glibc-langpack-yo
glibc-langpack-yi
glibc-langpack-xh
glibc-langpack-wo
glibc-langpack-sa
glibc-langpack-si
glibc-langpack-shs
glibc-langpack-shn
glibc-langpack-sgs
glibc-langpack-se
glibc-langpack-sd
glibc-langpack-sc
glibc-langpack-sat
glibc-langpack-sah
glibc-langpack-sid
glibc-langpack-rw
glibc-langpack-ru
glibc-langpack-ro
glibc-langpack-raj
glibc-langpack-quz
glibc-langpack-pt
glibc-langpack-ps
glibc-langpack-pl
glibc-langpack-sv
glibc-langpack-the
glibc-langpack-th
glibc-langpack-tg
glibc-langpack-te
glibc-langpack-tcy
glibc-langpack-ta
glibc-langpack-szl
glibc-langpack-sw
glibc-langpack-pap
glibc-langpack-st
glibc-langpack-ss
glibc-langpack-sr
glibc-langpack-sq
glibc-langpack-so
glibc-langpack-sm
glibc-langpack-sl
glibc-langpack-sk
glibc-langpack-bg
glibc-langpack-ar
glibc-langpack-as
glibc-langpack-ast
glibc-langpack-ayc
glibc-langpack-az
glibc-langpack-be
glibc-langpack-bem
glibc-langpack-ber
glibc-langpack-anp
glibc-langpack-bhb
glibc-langpack-bho
glibc-langpack-bi
glibc-langpack-bn
glibc-langpack-bo
glibc-langpack-br
glibc-langpack-brx
glibc-langpack-ga
glibc-langpack-an
glibc-langpack-am
glibc-langpack-ak
glibc-langpack-agr
glibc-langpack-af
glibc-langpack-aa
glibc-headers
glibc-gconv-extra
compat-libpthread-nonshared
glibc-langpack-gd
glibc-langpack-byn
glibc-langpack-fy
glibc-langpack-fur
glibc-langpack-fr
glibc-langpack-fo
glibc-langpack-fil
glibc-langpack-fi
glibc-langpack-ff
glibc-langpack-fa
glibc-langpack-eu
glibc-langpack-et
glibc-langpack-es
glibc-langpack-eo
glibc-langpack-en
glibc-langpack-el
glibc-langpack-dz
glibc-langpack-dsb
glibc-langpack-bs
glibc-langpack-ca
glibc-langpack-ce
glibc-langpack-chr
glibc-langpack-crh
glibc-langpack-cs
glibc-langpack-cv
glibc-langpack-cy
glibc-langpack-da
glibc-langpack-de
glibc-langpack-doi
glibc-langpack-dv
glibc-langpack-csb
glibc (Debian package)
nscd (Ubuntu package)
sys-libs/glibc
rhel-- (Red Hat package)
IBM Security Guardium
IBM Cloud Pak System
IBM Storage Scale System
Junos cRPD

Install update from vendor's website.

Migration Toolkit for Runtimes - update to 1.2.1
Fence Agents Remediation Operator - update to 0.2.1
Node Health Check Operator - addressed in versions 0.4.1, 0.6.1
Self Node Remediation Operator - addressed in versions 0.5.1, 0.7.1
OpenShift API for Data Protection (OADP) - update to 1.0.14
Red Hat OpenShift Serverless - update to 1.30.2
Run Once Duration Override Operator for Red Hat OpenShift - update to 1.0.1
Red Hat OpenShift Kernel Module Management - update to 1.1.2
Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - addressed in versions 1.1.3, 1.2.0
Service Telemetry Framework - update to 1.5.4
Migration Toolkit for Containers - addressed in versions 1.7.14, 1.8.1
OpenShift Pipelines - addressed in versions 1.10.6, 1.11.2, 1.12.1
cert-manager Operator for Red Hat OpenShift - update to 1.12.1
Multicluster Engine for Kubernetes - addressed in versions 2.1.9, 2.2.9, 2.3.3
OpenShift Service Mesh - addressed in versions 2.2.11, 2.3.8, 2.4.4
Migration Toolkit for Virtualization - addressed in versions 2.4.3, 2.5.2
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.6.8, 2.7.9, 2.8.3
Red Hat Advanced Cluster Security for Kubernetes - addressed in versions 3.74.7, 4.0.5, 4.1.4, 4.2.2
Red Hat OpenShift Container Platform - addressed in versions 4.11.54, 4.12.39, 4.12.45, 4.13.17, 4.13.24, 4.14.0, 4.14.4
OpenShift Virtualization - addressed in versions 4.11.7, 4.12.8, 4.12.9, 4.13.5
Node Maintenance Operator - addressed in versions 5.0.1, 5.2.1
OpenShift Logging - addressed in versions 5.5.17, 5.6.12, 5.7.7
Red Hat Migration Toolkit for Applications - addressed in versions 6.1.4, 6.2.1
IBM Qradar SIEM - update to 7.5.0 Update Pack 8
Red Hat Process Automation Manager (formerly JBoss BPM Suite) - update to 7.13.4 SP1
IBM Business Automation Manager Open Editions - update to 8.0.4 IF001
Red Hat OpenStack - addressed in versions 16.2.5, 17.1.1
libc6 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2.31-0ubuntu9.14, 2.35-0ubuntu3.5, 2.35-0ubuntu3.6, 2.37-0ubuntu2.2
libc-bin (Ubuntu package) - addressed in versions Ubuntu Pro, 2.31-0ubuntu9.14, 2.35-0ubuntu3.5, 2.35-0ubuntu3.6, 2.37-0ubuntu2.2
IBM Integrated Analytics System - update to 1.0.30.0
IBM MQ Operator - addressed in versions 2.0.16, 2.4.4
IBM Cloud Pak System - update to 2.3.4.0
Cloud Pak for Network Automation - update to 2.6.4
nscd - update to 2.28-97
glibc-benchtests - update to 2.28-97
glibc-debugsource - update to 2.28-97
glibc-locale-source - update to 2.28-97
glibc-debuginfo - update to 2.28-97
glibc-debugutils - update to 2.28-97
glibc-compat-2.17 - update to 2.28-97
libnsl - update to 2.28-97
nss_modules - update to 2.28-97
glibc - update to 2.28-97
glibc-all-langpacks - update to 2.28-97
glibc-devel - update to 2.28-97
glibc-nss-devel - update to 2.28-97
glibc-common - update to 2.28-97
glibc-help - update to 2.28-97
glibc (Red Hat package) - addressed in versions 2.28-189.8.el8_6, 2.28-225.el8_8.6, 2.34-60.el9_2.7
glibc-langpack-nso - update to 2.28-225.0.4
glibc-langpack-pa - update to 2.28-225.0.4
glibc-langpack-os - update to 2.28-225.0.4
glibc-langpack-or - update to 2.28-225.0.4
glibc-langpack-mhr - update to 2.28-225.0.4
glibc-langpack-om - update to 2.28-225.0.4
glibc-langpack-mi - update to 2.28-225.0.4
glibc-langpack-miq - update to 2.28-225.0.4
glibc-langpack-mjw - update to 2.28-225.0.4
glibc-langpack-mk - update to 2.28-225.0.4
glibc-langpack-oc - update to 2.28-225.0.4
glibc-langpack-ml - update to 2.28-225.0.4
glibc-langpack-mn - update to 2.28-225.0.4
glibc-langpack-mni - update to 2.28-225.0.4
glibc-langpack-ms - update to 2.28-225.0.4
glibc-langpack-nr - update to 2.28-225.0.4
glibc-langpack-nn - update to 2.28-225.0.4
glibc-langpack-nl - update to 2.28-225.0.4
glibc-langpack-kw - update to 2.28-225.0.4
glibc-langpack-niu - update to 2.28-225.0.4
glibc-langpack-nhn - update to 2.28-225.0.4
glibc-langpack-mr - update to 2.28-225.0.4
glibc-langpack-ne - update to 2.28-225.0.4
glibc-langpack-nds - update to 2.28-225.0.4
glibc-langpack-nb - update to 2.28-225.0.4
glibc-langpack-nan - update to 2.28-225.0.4
glibc-langpack-my - update to 2.28-225.0.4
glibc-langpack-mt - update to 2.28-225.0.4
glibc-langpack-hsb - update to 2.28-225.0.4
glibc-langpack-ja - update to 2.28-225.0.4
glibc-langpack-iu - update to 2.28-225.0.4
glibc-langpack-it - update to 2.28-225.0.4
glibc-langpack-is - update to 2.28-225.0.4
glibc-langpack-ik - update to 2.28-225.0.4
glibc-langpack-ig - update to 2.28-225.0.4
glibc-langpack-id - update to 2.28-225.0.4
glibc-langpack-ia - update to 2.28-225.0.4
glibc-langpack-hy - update to 2.28-225.0.4
glibc-langpack-hu - update to 2.28-225.0.4
glibc-langpack-ht - update to 2.28-225.0.4
glibc-langpack-ka - update to 2.28-225.0.4
glibc-langpack-hr - update to 2.28-225.0.4
glibc-langpack-hne - update to 2.28-225.0.4
glibc-langpack-hif - update to 2.28-225.0.4
glibc-langpack-hi - update to 2.28-225.0.4
glibc-langpack-he - update to 2.28-225.0.4
glibc-langpack-hak - update to 2.28-225.0.4
glibc-langpack-ha - update to 2.28-225.0.4
glibc-langpack-gv - update to 2.28-225.0.4
glibc-langpack-gu - update to 2.28-225.0.4
glibc-langpack-gl - update to 2.28-225.0.4
glibc-langpack-cmn - update to 2.28-225.0.4
glibc-langpack-lb - update to 2.28-225.0.4
glibc-langpack-mfe - update to 2.28-225.0.4
glibc-langpack-mai - update to 2.28-225.0.4
glibc-langpack-mag - update to 2.28-225.0.4
glibc-langpack-lzh - update to 2.28-225.0.4
glibc-langpack-lv - update to 2.28-225.0.4
glibc-langpack-lt - update to 2.28-225.0.4
glibc-langpack-lo - update to 2.28-225.0.4
glibc-langpack-ln - update to 2.28-225.0.4
glibc-langpack-lij - update to 2.28-225.0.4
glibc-langpack-li - update to 2.28-225.0.4
glibc-langpack-lg - update to 2.28-225.0.4
glibc-langpack-mg - update to 2.28-225.0.4
glibc-langpack-ky - update to 2.28-225.0.4
glibc-langpack-gez - update to 2.28-225.0.4
glibc-langpack-ku - update to 2.28-225.0.4
glibc-langpack-ks - update to 2.28-225.0.4
glibc-langpack-kok - update to 2.28-225.0.4
glibc-langpack-ko - update to 2.28-225.0.4
glibc-langpack-kn - update to 2.28-225.0.4
glibc-langpack-km - update to 2.28-225.0.4
glibc-langpack-kl - update to 2.28-225.0.4
glibc-langpack-kk - update to 2.28-225.0.4
glibc-langpack-kab - update to 2.28-225.0.4
glibc-langpack-tt - update to 2.28-225.0.4
glibc-langpack-wae - update to 2.28-225.0.4
glibc-langpack-wa - update to 2.28-225.0.4
glibc-langpack-vi - update to 2.28-225.0.4
glibc-langpack-ve - update to 2.28-225.0.4
glibc-langpack-uz - update to 2.28-225.0.4
glibc-langpack-ur - update to 2.28-225.0.4
glibc-langpack-unm - update to 2.28-225.0.4
glibc-langpack-uk - update to 2.28-225.0.4
glibc-langpack-ug - update to 2.28-225.0.4
glibc-langpack-wal - update to 2.28-225.0.4
glibc-langpack-ts - update to 2.28-225.0.4
glibc-langpack-tr - update to 2.28-225.0.4
glibc-langpack-tpi - update to 2.28-225.0.4
glibc-langpack-to - update to 2.28-225.0.4
glibc-langpack-tn - update to 2.28-225.0.4
glibc-langpack-tl - update to 2.28-225.0.4
glibc-langpack-tk - update to 2.28-225.0.4
glibc-langpack-tig - update to 2.28-225.0.4
glibc-locale-source - addressed in versions 2.28-225.0.4, 2.36-10
glibc-doc - addressed in versions 2.28-225.0.4, 2.36-10
nss_hesiod - addressed in versions 2.28-225.0.4, 2.36-10
nss_db - addressed in versions 2.28-225.0.4, 2.36-10
nscd - update to 2.28-225.0.4
libnsl - addressed in versions 2.28-225.0.4, 2.36-10
glibc-utils - addressed in versions 2.28-225.0.4, 2.36-10
glibc-static - addressed in versions 2.28-225.0.4, 2.36-10
glibc-nss-devel - addressed in versions 2.28-225.0.4, 2.36-10
glibc-minimal-langpack - addressed in versions 2.28-225.0.4, 2.36-10
glibc-langpack-ti - update to 2.28-225.0.4
glibc-langpack-zu - update to 2.28-225.0.4
glibc-langpack-zh - addressed in versions 2.28-225.0.4, 2.36-10
glibc-langpack-yuw - update to 2.28-225.0.4
glibc-langpack-yue - update to 2.28-225.0.4
glibc-langpack-yo - update to 2.28-225.0.4
glibc-langpack-yi - update to 2.28-225.0.4
glibc-langpack-xh - update to 2.28-225.0.4
glibc-langpack-wo - update to 2.28-225.0.4
glibc-langpack-sa - update to 2.28-225.0.4
glibc-langpack-si - update to 2.28-225.0.4
glibc-langpack-shs - update to 2.28-225.0.4
glibc-langpack-shn - update to 2.28-225.0.4
glibc-langpack-sgs - update to 2.28-225.0.4
glibc-langpack-se - update to 2.28-225.0.4
glibc-langpack-sd - update to 2.28-225.0.4
glibc-langpack-sc - update to 2.28-225.0.4
glibc-langpack-sat - update to 2.28-225.0.4
glibc-langpack-sah - update to 2.28-225.0.4
glibc-langpack-sid - update to 2.28-225.0.4
glibc-langpack-rw - update to 2.28-225.0.4
glibc-langpack-ru - update to 2.28-225.0.4
glibc-langpack-ro - update to 2.28-225.0.4
glibc-langpack-raj - update to 2.28-225.0.4
glibc-langpack-quz - update to 2.28-225.0.4
glibc-langpack-pt - update to 2.28-225.0.4
glibc-langpack-ps - update to 2.28-225.0.4
glibc-langpack-pl - update to 2.28-225.0.4
glibc-langpack-sv - update to 2.28-225.0.4
glibc-langpack-the - update to 2.28-225.0.4
glibc-langpack-th - update to 2.28-225.0.4
glibc-langpack-tg - update to 2.28-225.0.4
glibc-langpack-te - update to 2.28-225.0.4
glibc-langpack-tcy - update to 2.28-225.0.4
glibc-langpack-ta - update to 2.28-225.0.4
glibc-langpack-szl - update to 2.28-225.0.4
glibc-langpack-sw - update to 2.28-225.0.4
glibc-langpack-pap - update to 2.28-225.0.4
glibc-langpack-st - update to 2.28-225.0.4
glibc-langpack-ss - update to 2.28-225.0.4
glibc-langpack-sr - update to 2.28-225.0.4
glibc-langpack-sq - update to 2.28-225.0.4
glibc-langpack-so - update to 2.28-225.0.4
glibc-langpack-sm - update to 2.28-225.0.4
glibc-langpack-sl - update to 2.28-225.0.4
glibc-langpack-sk - update to 2.28-225.0.4
glibc-langpack-bg - update to 2.28-225.0.4
glibc-langpack-ar - update to 2.28-225.0.4
glibc-langpack-as - update to 2.28-225.0.4
glibc-langpack-ast - update to 2.28-225.0.4
glibc-langpack-ayc - update to 2.28-225.0.4
glibc-langpack-az - update to 2.28-225.0.4
glibc-langpack-be - update to 2.28-225.0.4
glibc-langpack-bem - update to 2.28-225.0.4
glibc-langpack-ber - update to 2.28-225.0.4
glibc-langpack-anp - update to 2.28-225.0.4
glibc-langpack-bhb - update to 2.28-225.0.4
glibc-langpack-bho - update to 2.28-225.0.4
glibc-langpack-bi - update to 2.28-225.0.4
glibc-langpack-bn - update to 2.28-225.0.4
glibc-langpack-bo - update to 2.28-225.0.4
glibc-langpack-br - update to 2.28-225.0.4
glibc-langpack-brx - update to 2.28-225.0.4
glibc-langpack-ga - update to 2.28-225.0.4
glibc-langpack-an - update to 2.28-225.0.4
glibc-langpack-am - update to 2.28-225.0.4
glibc-langpack-ak - update to 2.28-225.0.4
glibc-langpack-agr - update to 2.28-225.0.4
glibc-langpack-af - update to 2.28-225.0.4
glibc-langpack-aa - update to 2.28-225.0.4
glibc-headers - update to 2.28-225.0.4
glibc-gconv-extra - addressed in versions 2.28-225.0.4, 2.36-10
glibc-devel - addressed in versions 2.28-225.0.4, 2.36-10
glibc-common - addressed in versions 2.28-225.0.4, 2.36-10
glibc-benchtests - addressed in versions 2.28-225.0.4, 2.36-10
glibc-all-langpacks - addressed in versions 2.28-225.0.4, 2.36-10
glibc - addressed in versions 2.28-225.0.4, 2.36-10
compat-libpthread-nonshared - addressed in versions 2.28-225.0.4, 2.36-10
glibc-langpack-gd - update to 2.28-225.0.4
glibc-langpack-byn - update to 2.28-225.0.4
glibc-langpack-fy - update to 2.28-225.0.4
glibc-langpack-fur - update to 2.28-225.0.4
glibc-langpack-fr - update to 2.28-225.0.4
glibc-langpack-fo - update to 2.28-225.0.4
glibc-langpack-fil - update to 2.28-225.0.4
glibc-langpack-fi - update to 2.28-225.0.4
glibc-langpack-ff - update to 2.28-225.0.4
glibc-langpack-fa - update to 2.28-225.0.4
glibc-langpack-eu - update to 2.28-225.0.4
glibc-langpack-et - update to 2.28-225.0.4
glibc-langpack-es - update to 2.28-225.0.4
glibc-langpack-eo - update to 2.28-225.0.4
glibc-langpack-en - addressed in versions 2.28-225.0.4, 2.36-10
glibc-langpack-el - update to 2.28-225.0.4
glibc-langpack-dz - update to 2.28-225.0.4
glibc-langpack-dsb - update to 2.28-225.0.4
glibc-langpack-bs - update to 2.28-225.0.4
glibc-langpack-ca - update to 2.28-225.0.4
glibc-langpack-ce - update to 2.28-225.0.4
glibc-langpack-chr - update to 2.28-225.0.4
glibc-langpack-crh - update to 2.28-225.0.4
glibc-langpack-cs - update to 2.28-225.0.4
glibc-langpack-cv - update to 2.28-225.0.4
glibc-langpack-cy - update to 2.28-225.0.4
glibc-langpack-da - update to 2.28-225.0.4
glibc-langpack-de - update to 2.28-225.0.4
glibc-langpack-doi - update to 2.28-225.0.4
glibc-langpack-dv - update to 2.28-225.0.4
glibc-langpack-csb - update to 2.28-225.0.4
glibc (Debian package) - addressed in versions 2.31-13+deb11u7, 2.36-9+deb12u3
glibc - update to 2.34-52
nscd (Ubuntu package) - update to 2.35-0ubuntu3.6
glibc - addressed in versions 2.36-14.fc37, 2.37-10.fc38, 2.38-6.fc39
sys-libs/glibc - update to 2.37-r7
IBM Cloud Pak for Watson AIOps - update to 4.4.0
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.14.0
Storage Ceph - update to 6.1z3
IBM Storage Scale System - addressed in versions 6.1.2.8, 6.1.9.0
rhel-- (Red Hat package) - addressed in versions 8/aarch64/7436/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6, 8/x86_64/7418/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6, 8.8/s390x/9193/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6, 8.8/x86_64/9181/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6, 8.8/x86_64/9407/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6
IBM supplied MQ Advanced container images - addressed in versions 9.3.0.11-r1, 9.3.3.2-r1
IBM Security Verify Governance - update to 10.0.2.0.4
IBM Sterling Order Management - update to 10.0.2403.1
IBM Robotic Process Automation - addressed in versions 21.0.7.18, 23.0.18
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.18, 23.0.18
Junos cRPD - update to 23.4R1
Juniper Cloud Native Router - update to 23.4R1

• https://bugzilla.redhat.com/show_bug.cgi?id=2237782
• https://access.redhat.com/security/cve/CVE-2023-4806

• Remote denial of service in glibc
• Debian update for glibc
• Fedora 39 update for glibc
• Fedora 37 update for glibc
• Fedora 38 update for glibc
• Red Hat Enterprise Linux 8 update for glibc
• Red Hat Enterprise Linux 9 update for glibc
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1.2
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.1
• Multiple vulnerabilities in Red Hat OpenStack Platform 16.2
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh for 2.4
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.3
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.2
• Multiple vulnerabilities in Logging Subsystem 5.6 for Red Hat OpenShift
• Multiple vulnerabilities in Logging Subsystem 5.7 for Red Hat OpenShift
• Multiple vulnerabilities in Network Observability plugin for the Openshift Console
• Multiple vulnerabilities in Red Hat OpenStack Platform 17
• Multiple vulnerabilities in Red Hat Ansible Automation Platform 2.4
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.5
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.7
• Multiple vulnerabilities in Red Hat Node Maintenance Operator 5.2
• Multiple vulnerabilities in Red Hat Node Maintenance Operator 5.0
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.0
• Multiple vulnerabilities in Logging Subsystem 5.5 for Red Hat OpenShift
• Multiple vulnerabilities in Cost Management for RHEL 8
• Multiple vulnerabilities in Cryostat 2 on RHEL 8
• Multiple vulnerabilities in Red Hat OpenShift Pipelines 1.12
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.2
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 3.74
• Multiple vulnerabilities in Red Hat Process Automation Manager 7.13
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC) 1.8
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.3
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.0
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.1
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.6
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC) 1.7
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.1
• Multiple vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift 1.2
• Multiple vulnerabilities in OpenShift Virtualization 4.13
• Multiple vulnerabilities in Red Hat OpenShift Virtualization release 4.11
• Multiple vulnerabilities in OpenShift Virtualization 4.12
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.7
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.8
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.2
• Multiple vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift 1.1
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1 on RHEL 8
• Multiple vulnerabilities in Run Once Duration Override Operator for Red Hat OpenShift
• Multiple vulnerabilities in Red Hat Service Interconnect for RHEL 9
• Multiple vulnerabilities in Migration Toolkit for Applications 6.2
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• Multiple vulnerabilities in Node Health Check Operator 0.6
• Multiple vulnerabilities in Node Health Check Operator 0.4
• Multiple vulnerabilities in Fence Agents Remediation Operator
• Multiple vulnerabilities in Migration Toolkit for Applications 6.1
• Multiple vulnerabilities in Red Hat OpenShift Pipelines 1.11
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.4
• Multiple vulnerabilities in Oracle Linux
• Red Hat Enterprise Linux 8.6 Extended Update Support update for glibc
• Multiple vulnerabilities in cert-manager Operator for Red Hat OpenShift 1.12
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.14
• Multiple vulnerabilities in Red Hat OpenShift Kernel Module Management 1.1
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.11
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.11
• Multiple vulnerabilities in OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple security vulnerabilities in IBM Business Automation Manager Open Editions
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Ubuntu update for glibc
• Multiple vulnerabilities in Red Hat OpenShift Pipelines 1.10
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.5
• IBM Storage Scale System update for glibc
• Ubuntu update for glibc
• Multiple vulnerabilities in IBM Cloud Pak for Network Automation
• Multiple vulnerabilities in OpenShift Virtualization 4.12
• Use-after-free in IBM Storage Ceph
• Multiple vulnerabilities in IBM Security Guardium
• Gentoo update for glibc
• openEuler update for glibc
• Multiple vulnerabilities in Service Telemetry Framework 1.5
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in Juniper Cloud Native Router
• Multiple vulnerabilities in Juniper Networks Junos cRPD
• Multiple vulnerabilities in IBM Sterling Order Management
• Multiple vulnerabilities in IBM Cloud Pak System
• IBM Integrated Analytics System update for glibc
• Multiple vulnerabilities in IBM Security Verify Governance - Identity Manager
• Multiple vulnerabilities in IBM Robotic Process Automation
• Amazon Linux AMI update for glibc
• Amazon Linux AMI update for glibc
• Anolis OS update for glibc
• Anolis OS update for glibc
• Multiple vulnerabilities in IBM webMethods Managed File Transfer