Use-after-free in GNU C Library (glibc) - CVE-2023-4813

Vulnerability identifier: #VU81453

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-4813

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the gaih_inet() function when the getaddrinfo() function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

GNU C Library (glibc)
Amazon Linux AMI
Oracle Linux
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Enterprise Storage
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux for IBM z Systems
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Development Tools Module
Basesystem Module
Ubuntu
openEuler
Cost Management
IBM Integrated Analytics System
Migration Toolkit for Runtimes
Service Interconnect
Fence Agents Remediation Operator
Run Once Duration Override Operator for Red Hat OpenShift
Red Hat OpenShift Kernel Module Management
Service Telemetry Framework
OpenShift Pipelines
cert-manager Operator for Red Hat OpenShift
Cryostat
Migration Toolkit for Virtualization
Ansible Automation Platform
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Advanced Cluster Security for Kubernetes
OpenShift Logging
Red Hat Migration Toolkit for Applications
Red Hat OpenStack
IBM MQ Operator
IBM Cloud Transformation Advisor
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Security Verify Governance
IBM Robotic Process Automation
Node Health Check Operator
Self Node Remediation Operator
Red Hat OpenShift Serverless
Multicluster Engine for Kubernetes
OpenShift Service Mesh
OpenShift Virtualization
Node Maintenance Operator
OpenShift Data Foundation (formerly OpenShift Container Storage)
OpenShift API for Data Protection (OADP)
Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
Network Observability plugin for the Openshift Console
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
IBM Qradar SIEM
Red Hat Process Automation Manager (formerly JBoss BPM Suite)
IBM Business Automation Manager Open Editions
webMethods Managed File Transfer
ObjectScale
Cloud Pak for Network Automation
Watson Studio on Cloud Pak for Data - Execution Engine for Apache Hadoop
Storage Ceph
IBM supplied MQ Advanced container images
IBM Sterling Order Management
Robotic Process Automation for Cloud Pak
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libc6 (Ubuntu package)
libc-bin (Ubuntu package)
nscd-debuginfo
glibc-extra-debuginfo
nscd
glibc-profile
glibc-locale-base-debuginfo
glibc-utils
glibc-debuginfo
glibc-locale-base
glibc-debugsource
glibc-utils-src-debugsource
glibc
glibc-locale
glibc-devel-debuginfo
glibc-utils-debuginfo
glibc-extra
glibc-locale-base-32bit-debuginfo
glibc-32bit
glibc-devel-32bit-debuginfo
glibc-devel-32bit
glibc-32bit-debuginfo
glibc-locale-base-32bit
glibc-info
glibc-i18ndata
glibc-utils-src
glibc-devel
glibc-devel-static
glibc-benchtests
glibc-all-langpacks
nss_modules
glibc-nss-devel
libnsl
glibc-locale-source
glibc-debugutils
glibc-compat-2.17
glibc-common
glibc-help
glibc (Red Hat package)
glibc-langpack-nb
glibc-langpack-mfe
glibc-langpack-ne
glibc-langpack-nds
glibc-langpack-lg
glibc-langpack-miq
glibc-langpack-nan
glibc-langpack-my
glibc-langpack-mt
glibc-langpack-mg
glibc-langpack-ms
glibc-langpack-mr
glibc-langpack-mni
glibc-langpack-mn
glibc-langpack-mhr
glibc-langpack-ml
glibc-langpack-mk
glibc-langpack-mjw
glibc-langpack-mi
glibc-langpack-hi
glibc-langpack-is
glibc-langpack-ik
glibc-langpack-ig
glibc-langpack-id
glibc-langpack-ia
glibc-langpack-hy
glibc-langpack-hu
glibc-langpack-ht
glibc-langpack-hsb
glibc-langpack-hr
glibc-langpack-hne
glibc-langpack-hif
glibc-langpack-it
glibc-langpack-he
glibc-langpack-hak
glibc-langpack-ha
glibc-langpack-gv
glibc-langpack-gu
glibc-langpack-gl
glibc-langpack-gez
glibc-langpack-gd
glibc-langpack-ga
glibc-langpack-fy
glibc-langpack-fur
glibc-langpack-fr
glibc-langpack-ku
glibc-langpack-mag
glibc-langpack-lzh
glibc-langpack-lv
glibc-langpack-lt
glibc-langpack-lo
glibc-langpack-ln
glibc-langpack-lij
glibc-langpack-li
glibc-langpack-rw
glibc-langpack-lb
glibc-langpack-ky
glibc-langpack-kw
glibc-langpack-mai
glibc-langpack-ks
glibc-langpack-kok
glibc-langpack-ko
glibc-langpack-kn
glibc-langpack-km
glibc-langpack-kl
glibc-langpack-kk
glibc-langpack-kab
glibc-langpack-ka
glibc-langpack-ja
glibc-langpack-iu
glibc-langpack-th
glibc-langpack-tr
glibc-langpack-tpi
glibc-langpack-to
glibc-langpack-tn
glibc-langpack-tl
glibc-langpack-tk
glibc-langpack-tig
glibc-langpack-ti
glibc-langpack-the
glibc-langpack-ts
glibc-langpack-tg
glibc-langpack-te
glibc-langpack-tcy
glibc-langpack-ta
glibc-langpack-szl
glibc-langpack-sw
glibc-langpack-sv
glibc-langpack-st
glibc-langpack-wa
glibc-langpack-yuw
glibc-langpack-yue
glibc-langpack-yo
glibc-langpack-yi
glibc-langpack-xh
glibc-langpack-wo
glibc-langpack-wal
glibc-langpack-wae
glibc-langpack-ss
glibc-langpack-vi
glibc-langpack-ve
glibc-langpack-uz
glibc-langpack-ur
glibc-langpack-unm
glibc-langpack-uk
glibc-langpack-ug
glibc-langpack-tt
glibc-langpack-os
glibc-langpack-ru
glibc-langpack-ro
glibc-langpack-raj
glibc-langpack-quz
glibc-langpack-pt
glibc-langpack-ps
glibc-langpack-pl
glibc-langpack-pap
glibc-langpack-pa
glibc-langpack-ayc
glibc-langpack-or
glibc-langpack-om
glibc-langpack-oc
glibc-langpack-nso
glibc-langpack-nr
glibc-langpack-nn
glibc-langpack-nl
glibc-langpack-niu
glibc-langpack-shs
glibc-langpack-sr
glibc-langpack-sq
glibc-langpack-so
glibc-langpack-sm
glibc-langpack-sl
glibc-langpack-sk
glibc-langpack-sid
glibc-langpack-si
glibc-langpack-nhn
glibc-langpack-shn
glibc-langpack-sgs
glibc-langpack-se
glibc-langpack-sd
glibc-langpack-sc
glibc-langpack-sat
glibc-langpack-sah
glibc-langpack-sa
glibc-langpack-anp
glibc-gconv-extra
glibc-langpack-aa
glibc-langpack-af
glibc-langpack-agr
glibc-langpack-ak
glibc-langpack-am
glibc-langpack-an
glibc-langpack-ar
glibc-langpack-as
glibc-langpack-ast
glibc-doc
glibc-langpack-az
glibc-langpack-be
glibc-langpack-bem
glibc-langpack-ber
nss_db
glibc-langpack-fo
glibc-static
glibc-minimal-langpack
glibc-headers
glibc-langpack-zu
glibc-langpack-zh
nss_hesiod
compat-libpthread-nonshared
glibc-langpack-en
glibc-langpack-cy
glibc-langpack-da
glibc-langpack-de
glibc-langpack-doi
glibc-langpack-dsb
glibc-langpack-dv
glibc-langpack-dz
glibc-langpack-el
glibc-langpack-bhb
glibc-langpack-eo
glibc-langpack-es
glibc-langpack-et
glibc-langpack-eu
glibc-langpack-fa
glibc-langpack-ff
glibc-langpack-fi
glibc-langpack-fil
glibc-langpack-csb
glibc-langpack-bg
glibc-langpack-bho
glibc-langpack-bi
glibc-langpack-bn
glibc-langpack-bo
glibc-langpack-br
glibc-langpack-brx
glibc-langpack-bs
glibc-langpack-byn
glibc-langpack-ce
glibc-langpack-cv
glibc-langpack-cs
glibc-langpack-crh
glibc-langpack-cmn
glibc-langpack-ca
glibc-langpack-chr
glibc-lang
nscd (Ubuntu package)
rhel-- (Red Hat package)
Dell EMC VxRail Appliance

Install updates from vendor's website.

GNU C Library (glibc) - update to 2.36
Migration Toolkit for Runtimes - update to 1.2.1
Fence Agents Remediation Operator - update to 0.2.1
Node Health Check Operator - addressed in versions 0.4.1, 0.6.1
Self Node Remediation Operator - addressed in versions 0.5.1, 0.7.1
OpenShift API for Data Protection (OADP) - update to 1.0.14
Red Hat OpenShift Serverless - update to 1.30.2
Run Once Duration Override Operator for Red Hat OpenShift - update to 1.0.1
Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - addressed in versions 1.1.3, 1.2.0
Red Hat OpenShift Kernel Module Management - update to 1.1.2
Service Telemetry Framework - update to 1.5.4
Migration Toolkit for Containers - addressed in versions 1.7.14, 1.8.1
OpenShift Pipelines - addressed in versions 1.10.6, 1.11.2, 1.12.1
cert-manager Operator for Red Hat OpenShift - update to 1.12.1
Multicluster Engine for Kubernetes - addressed in versions 2.1.9, 2.2.9, 2.3.3
OpenShift Service Mesh - addressed in versions 2.2.11, 2.3.8, 2.4.4
Migration Toolkit for Virtualization - addressed in versions 2.4.3, 2.5.2
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.6.8, 2.7.9, 2.8.3
Red Hat Advanced Cluster Security for Kubernetes - addressed in versions 3.74.7, 4.0.5, 4.1.4, 4.2.2
Red Hat OpenShift Container Platform - addressed in versions 4.11.54, 4.12.39, 4.12.45, 4.13.17, 4.13.24, 4.14.0, 4.14.4
OpenShift Virtualization - addressed in versions 4.11.7, 4.12.8, 4.12.9, 4.13.5
Node Maintenance Operator - addressed in versions 5.0.1, 5.2.1
OpenShift Logging - addressed in versions 5.5.17, 5.6.12, 5.7.7
Red Hat Migration Toolkit for Applications - addressed in versions 6.1.4, 6.2.1
IBM Qradar SIEM - update to 7.5.0 Update Pack 8
Red Hat Process Automation Manager (formerly JBoss BPM Suite) - update to 7.13.4 SP1
IBM Business Automation Manager Open Editions - update to 8.0.4 IF001
Red Hat OpenStack - addressed in versions 16.2.5, 17.1.1
libc6 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2.31-0ubuntu9.14, 2.35-0ubuntu3.5, 2.35-0ubuntu3.6, 2.37-0ubuntu2.2
libc-bin (Ubuntu package) - addressed in versions Ubuntu Pro, 2.31-0ubuntu9.14, 2.35-0ubuntu3.5, 2.35-0ubuntu3.6, 2.37-0ubuntu2.2
IBM Integrated Analytics System - update to 1.0.30.0
ObjectScale - update to 1.4.0
IBM MQ Operator - addressed in versions 2.0.16, 2.4.4
Cloud Pak for Network Automation - update to 2.6.4
nscd-debuginfo - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-extra-debuginfo - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
nscd - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-profile - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-locale-base-debuginfo - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-utils - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-debuginfo - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-locale-base - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-debugsource - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-utils-src-debugsource - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-locale - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-devel-debuginfo - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-utils-debuginfo - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-extra - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-locale-base-32bit-debuginfo - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-32bit - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-devel-32bit-debuginfo - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-devel-32bit - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-32bit-debuginfo - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-locale-base-32bit - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-info - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-i18ndata - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-utils-src - update to 2.26-150000.13.70.1
glibc-devel - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-devel-static - addressed in versions 2.26-150000.13.70.1, 2.31-150300.63.1
glibc-benchtests - update to 2.28-97
glibc-all-langpacks - update to 2.28-97
glibc-devel - update to 2.28-97
nss_modules - update to 2.28-97
glibc-nss-devel - update to 2.28-97
libnsl - update to 2.28-97
nscd - update to 2.28-97
glibc-debugsource - update to 2.28-97
glibc-locale-source - update to 2.28-97
glibc-debuginfo - update to 2.28-97
glibc-debugutils - update to 2.28-97
glibc-compat-2.17 - update to 2.28-97
glibc - update to 2.28-97
glibc-common - update to 2.28-97
glibc-help - update to 2.28-97
glibc (Red Hat package) - addressed in versions 2.28-189.8.el8_6, 2.28-225.el8_8.6, 2.34-60.el9_2.7
glibc-langpack-nb - update to 2.28-225.0.4
glibc-langpack-mfe - update to 2.28-225.0.4
glibc-langpack-ne - update to 2.28-225.0.4
glibc-langpack-nds - update to 2.28-225.0.4
glibc-langpack-lg - update to 2.28-225.0.4
glibc-langpack-miq - update to 2.28-225.0.4
glibc-langpack-nan - update to 2.28-225.0.4
glibc-langpack-my - update to 2.28-225.0.4
glibc-langpack-mt - update to 2.28-225.0.4
glibc-langpack-mg - update to 2.28-225.0.4
glibc-langpack-ms - update to 2.28-225.0.4
glibc-langpack-mr - update to 2.28-225.0.4
glibc-langpack-mni - update to 2.28-225.0.4
glibc-langpack-mn - update to 2.28-225.0.4
glibc-langpack-mhr - update to 2.28-225.0.4
glibc-langpack-ml - update to 2.28-225.0.4
glibc-langpack-mk - update to 2.28-225.0.4
glibc-langpack-mjw - update to 2.28-225.0.4
glibc-langpack-mi - update to 2.28-225.0.4
glibc-langpack-hi - update to 2.28-225.0.4
glibc-langpack-is - update to 2.28-225.0.4
glibc-langpack-ik - update to 2.28-225.0.4
glibc-langpack-ig - update to 2.28-225.0.4
glibc-langpack-id - update to 2.28-225.0.4
glibc-langpack-ia - update to 2.28-225.0.4
glibc-langpack-hy - update to 2.28-225.0.4
glibc-langpack-hu - update to 2.28-225.0.4
glibc-langpack-ht - update to 2.28-225.0.4
glibc-langpack-hsb - update to 2.28-225.0.4
glibc-langpack-hr - update to 2.28-225.0.4
glibc-langpack-hne - update to 2.28-225.0.4
glibc-langpack-hif - update to 2.28-225.0.4
glibc-langpack-it - update to 2.28-225.0.4
glibc-langpack-he - update to 2.28-225.0.4
glibc-langpack-hak - update to 2.28-225.0.4
glibc-langpack-ha - update to 2.28-225.0.4
glibc-langpack-gv - update to 2.28-225.0.4
glibc-langpack-gu - update to 2.28-225.0.4
glibc-langpack-gl - update to 2.28-225.0.4
glibc-langpack-gez - update to 2.28-225.0.4
glibc-langpack-gd - update to 2.28-225.0.4
glibc-langpack-ga - update to 2.28-225.0.4
glibc-langpack-fy - update to 2.28-225.0.4
glibc-langpack-fur - update to 2.28-225.0.4
glibc-langpack-fr - update to 2.28-225.0.4
glibc-langpack-ku - update to 2.28-225.0.4
glibc-langpack-mag - update to 2.28-225.0.4
glibc-langpack-lzh - update to 2.28-225.0.4
glibc-langpack-lv - update to 2.28-225.0.4
glibc-langpack-lt - update to 2.28-225.0.4
glibc-langpack-lo - update to 2.28-225.0.4
glibc-langpack-ln - update to 2.28-225.0.4
glibc-langpack-lij - update to 2.28-225.0.4
glibc-langpack-li - update to 2.28-225.0.4
glibc-langpack-rw - update to 2.28-225.0.4
glibc-langpack-lb - update to 2.28-225.0.4
glibc-langpack-ky - update to 2.28-225.0.4
glibc-langpack-kw - update to 2.28-225.0.4
glibc-langpack-mai - update to 2.28-225.0.4
glibc-langpack-ks - update to 2.28-225.0.4
glibc-langpack-kok - update to 2.28-225.0.4
glibc-langpack-ko - update to 2.28-225.0.4
glibc-langpack-kn - update to 2.28-225.0.4
glibc-langpack-km - update to 2.28-225.0.4
glibc-langpack-kl - update to 2.28-225.0.4
glibc-langpack-kk - update to 2.28-225.0.4
glibc-langpack-kab - update to 2.28-225.0.4
glibc-langpack-ka - update to 2.28-225.0.4
glibc-langpack-ja - update to 2.28-225.0.4
glibc-langpack-iu - update to 2.28-225.0.4
glibc-langpack-th - update to 2.28-225.0.4
glibc-langpack-tr - update to 2.28-225.0.4
glibc-langpack-tpi - update to 2.28-225.0.4
glibc-langpack-to - update to 2.28-225.0.4
glibc-langpack-tn - update to 2.28-225.0.4
glibc-langpack-tl - update to 2.28-225.0.4
glibc-langpack-tk - update to 2.28-225.0.4
glibc-langpack-tig - update to 2.28-225.0.4
glibc-langpack-ti - update to 2.28-225.0.4
glibc-langpack-the - update to 2.28-225.0.4
glibc-langpack-ts - update to 2.28-225.0.4
glibc-langpack-tg - update to 2.28-225.0.4
glibc-langpack-te - update to 2.28-225.0.4
glibc-langpack-tcy - update to 2.28-225.0.4
glibc-langpack-ta - update to 2.28-225.0.4
glibc-langpack-szl - update to 2.28-225.0.4
glibc-langpack-sw - update to 2.28-225.0.4
glibc-langpack-sv - update to 2.28-225.0.4
glibc-langpack-st - update to 2.28-225.0.4
glibc-langpack-wa - update to 2.28-225.0.4
glibc-langpack-yuw - update to 2.28-225.0.4
glibc-langpack-yue - update to 2.28-225.0.4
glibc-langpack-yo - update to 2.28-225.0.4
glibc-langpack-yi - update to 2.28-225.0.4
glibc-langpack-xh - update to 2.28-225.0.4
glibc-langpack-wo - update to 2.28-225.0.4
glibc-langpack-wal - update to 2.28-225.0.4
glibc-langpack-wae - update to 2.28-225.0.4
glibc-langpack-ss - update to 2.28-225.0.4
glibc-langpack-vi - update to 2.28-225.0.4
glibc-langpack-ve - update to 2.28-225.0.4
glibc-langpack-uz - update to 2.28-225.0.4
glibc-langpack-ur - update to 2.28-225.0.4
glibc-langpack-unm - update to 2.28-225.0.4
glibc-langpack-uk - update to 2.28-225.0.4
glibc-langpack-ug - update to 2.28-225.0.4
glibc-langpack-tt - update to 2.28-225.0.4
glibc-langpack-os - update to 2.28-225.0.4
glibc-langpack-ru - update to 2.28-225.0.4
glibc-langpack-ro - update to 2.28-225.0.4
glibc-langpack-raj - update to 2.28-225.0.4
glibc-langpack-quz - update to 2.28-225.0.4
glibc-langpack-pt - update to 2.28-225.0.4
glibc-langpack-ps - update to 2.28-225.0.4
glibc-langpack-pl - update to 2.28-225.0.4
glibc-langpack-pap - update to 2.28-225.0.4
glibc-langpack-pa - update to 2.28-225.0.4
glibc-langpack-ayc - update to 2.28-225.0.4
glibc-langpack-or - update to 2.28-225.0.4
glibc-langpack-om - update to 2.28-225.0.4
glibc-langpack-oc - update to 2.28-225.0.4
glibc-langpack-nso - update to 2.28-225.0.4
glibc-langpack-nr - update to 2.28-225.0.4
glibc-langpack-nn - update to 2.28-225.0.4
glibc-langpack-nl - update to 2.28-225.0.4
glibc-langpack-niu - update to 2.28-225.0.4
glibc-langpack-shs - update to 2.28-225.0.4
glibc-langpack-sr - update to 2.28-225.0.4
glibc-langpack-sq - update to 2.28-225.0.4
glibc-langpack-so - update to 2.28-225.0.4
glibc-langpack-sm - update to 2.28-225.0.4
glibc-langpack-sl - update to 2.28-225.0.4
glibc-langpack-sk - update to 2.28-225.0.4
glibc-langpack-sid - update to 2.28-225.0.4
glibc-langpack-si - update to 2.28-225.0.4
glibc-langpack-nhn - update to 2.28-225.0.4
glibc-langpack-shn - update to 2.28-225.0.4
glibc-langpack-sgs - update to 2.28-225.0.4
glibc-langpack-se - update to 2.28-225.0.4
glibc-langpack-sd - update to 2.28-225.0.4
glibc-langpack-sc - update to 2.28-225.0.4
glibc-langpack-sat - update to 2.28-225.0.4
glibc-langpack-sah - update to 2.28-225.0.4
glibc-langpack-sa - update to 2.28-225.0.4
glibc-langpack-anp - update to 2.28-225.0.4
glibc-devel - update to 2.28-225.0.4
glibc-gconv-extra - update to 2.28-225.0.4
glibc-langpack-aa - update to 2.28-225.0.4
glibc-langpack-af - update to 2.28-225.0.4
glibc-langpack-agr - update to 2.28-225.0.4
glibc-langpack-ak - update to 2.28-225.0.4
glibc-langpack-am - update to 2.28-225.0.4
glibc-langpack-an - update to 2.28-225.0.4
glibc-common - update to 2.28-225.0.4
glibc-langpack-ar - update to 2.28-225.0.4
glibc-langpack-as - update to 2.28-225.0.4
glibc-langpack-ast - update to 2.28-225.0.4
glibc-doc - update to 2.28-225.0.4
glibc-langpack-az - update to 2.28-225.0.4
glibc-langpack-be - update to 2.28-225.0.4
glibc-langpack-bem - update to 2.28-225.0.4
glibc-langpack-ber - update to 2.28-225.0.4
glibc-locale-source - update to 2.28-225.0.4
nscd - update to 2.28-225.0.4
nss_db - update to 2.28-225.0.4
libnsl - update to 2.28-225.0.4
glibc-utils - update to 2.28-225.0.4
glibc-langpack-fo - update to 2.28-225.0.4
glibc-static - update to 2.28-225.0.4
glibc-nss-devel - update to 2.28-225.0.4
glibc-minimal-langpack - update to 2.28-225.0.4
glibc-headers - update to 2.28-225.0.4
glibc-langpack-zu - update to 2.28-225.0.4
glibc-langpack-zh - update to 2.28-225.0.4
nss_hesiod - update to 2.28-225.0.4
compat-libpthread-nonshared - update to 2.28-225.0.4
glibc - update to 2.28-225.0.4
glibc-all-langpacks - update to 2.28-225.0.4
glibc-benchtests - update to 2.28-225.0.4
glibc-langpack-en - update to 2.28-225.0.4
glibc-langpack-cy - update to 2.28-225.0.4
glibc-langpack-da - update to 2.28-225.0.4
glibc-langpack-de - update to 2.28-225.0.4
glibc-langpack-doi - update to 2.28-225.0.4
glibc-langpack-dsb - update to 2.28-225.0.4
glibc-langpack-dv - update to 2.28-225.0.4
glibc-langpack-dz - update to 2.28-225.0.4
glibc-langpack-el - update to 2.28-225.0.4
glibc-langpack-bhb - update to 2.28-225.0.4
glibc-langpack-eo - update to 2.28-225.0.4
glibc-langpack-es - update to 2.28-225.0.4
glibc-langpack-et - update to 2.28-225.0.4
glibc-langpack-eu - update to 2.28-225.0.4
glibc-langpack-fa - update to 2.28-225.0.4
glibc-langpack-ff - update to 2.28-225.0.4
glibc-langpack-fi - update to 2.28-225.0.4
glibc-langpack-fil - update to 2.28-225.0.4
glibc-langpack-csb - update to 2.28-225.0.4
glibc-langpack-bg - update to 2.28-225.0.4
glibc-langpack-bho - update to 2.28-225.0.4
glibc-langpack-bi - update to 2.28-225.0.4
glibc-langpack-bn - update to 2.28-225.0.4
glibc-langpack-bo - update to 2.28-225.0.4
glibc-langpack-br - update to 2.28-225.0.4
glibc-langpack-brx - update to 2.28-225.0.4
glibc-langpack-bs - update to 2.28-225.0.4
glibc-langpack-byn - update to 2.28-225.0.4
glibc-langpack-ce - update to 2.28-225.0.4
glibc-langpack-cv - update to 2.28-225.0.4
glibc-langpack-cs - update to 2.28-225.0.4
glibc-langpack-crh - update to 2.28-225.0.4
glibc-langpack-cmn - update to 2.28-225.0.4
glibc-langpack-ca - update to 2.28-225.0.4
glibc-langpack-chr - update to 2.28-225.0.4
glibc-lang - update to 2.31-150300.63.1
glibc - update to 2.34-52
nscd (Ubuntu package) - update to 2.35-0ubuntu3.6
IBM Cloud Transformation Advisor - update to 3.10.0
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.4
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.14.0
Watson Studio on Cloud Pak for Data - Execution Engine for Apache Hadoop - update to 5.0.3
Storage Ceph - update to 6.1z3
rhel-- (Red Hat package) - addressed in versions 8/aarch64/7436/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6, 8/x86_64/7418/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6, 8.8/s390x/9193/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6, 8.8/x86_64/9181/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6, 8.8/x86_64/9407/glibc/2.28-225.el8_8.6/src/fd431d51/package">glibc-2.28-225.el8_8.6
Dell EMC VxRail Appliance - update to 8.0.201
IBM supplied MQ Advanced container images - addressed in versions 9.3.0.11-r1, 9.3.3.2-r1
IBM Security Verify Governance - update to 10.0.2.0.4
IBM Sterling Order Management - update to 10.0.2403.1
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.18, 23.0.18
IBM Robotic Process Automation - addressed in versions 21.0.7.18, 23.0.18

• https://bugzilla.redhat.com/show_bug.cgi?id=2237798
• https://access.redhat.com/security/cve/CVE-2023-4813
• http://www.openwall.com/lists/oss-security/2023/10/03/8

• Denial of service in GNU glibc
• Red Hat Enterprise Linux 8 update for glibc
• Red Hat Enterprise Linux 9 update for glibc
• SUSE update for glibc
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1.2
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• SUSE update for glibc
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.1
• Multiple vulnerabilities in Red Hat OpenStack Platform 16.2
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh for 2.4
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.3
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.2
• Multiple vulnerabilities in Logging Subsystem 5.6 for Red Hat OpenShift
• Multiple vulnerabilities in Logging Subsystem 5.7 for Red Hat OpenShift
• Multiple vulnerabilities in Network Observability plugin for the Openshift Console
• Multiple vulnerabilities in Red Hat OpenStack Platform 17
• Multiple vulnerabilities in Red Hat Ansible Automation Platform 2.4
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.5
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.7
• Multiple vulnerabilities in Red Hat Node Maintenance Operator 5.2
• Multiple vulnerabilities in Red Hat Node Maintenance Operator 5.0
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.0
• Multiple vulnerabilities in Logging Subsystem 5.5 for Red Hat OpenShift
• Multiple vulnerabilities in Cost Management for RHEL 8
• Multiple vulnerabilities in Cryostat 2 on RHEL 8
• Multiple vulnerabilities in Red Hat OpenShift Pipelines 1.12
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.2
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 3.74
• Multiple vulnerabilities in Red Hat Process Automation Manager 7.13
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC) 1.8
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.3
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.0
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.1
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.6
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC) 1.7
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.1
• Multiple vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift 1.2
• Multiple vulnerabilities in OpenShift Virtualization 4.13
• Multiple vulnerabilities in Red Hat OpenShift Virtualization release 4.11
• Multiple vulnerabilities in OpenShift Virtualization 4.12
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.7
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.8
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.2
• Multiple vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift 1.1
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1 on RHEL 8
• Multiple vulnerabilities in Run Once Duration Override Operator for Red Hat OpenShift
• Multiple vulnerabilities in Red Hat Service Interconnect for RHEL 9
• Multiple vulnerabilities in Migration Toolkit for Applications 6.2
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• Multiple vulnerabilities in Node Health Check Operator 0.6
• Multiple vulnerabilities in Node Health Check Operator 0.4
• Multiple vulnerabilities in Fence Agents Remediation Operator
• Multiple vulnerabilities in Migration Toolkit for Applications 6.1
• Multiple vulnerabilities in Red Hat OpenShift Pipelines 1.11
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.4
• Multiple vulnerabilities in Oracle Linux
• Red Hat Enterprise Linux 8.6 Extended Update Support update for glibc
• Multiple vulnerabilities in cert-manager Operator for Red Hat OpenShift 1.12
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.14
• Multiple vulnerabilities in Red Hat OpenShift Kernel Module Management 1.1
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.11
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.11
• Multiple vulnerabilities in OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple security vulnerabilities in IBM Business Automation Manager Open Editions
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Ubuntu update for glibc
• Multiple vulnerabilities in Red Hat OpenShift Pipelines 1.10
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.5
• Ubuntu update for glibc
• Multiple vulnerabilities in IBM Cloud Pak for Network Automation
• Multiple vulnerabilities in OpenShift Virtualization 4.12
• Use-after-free in IBM Storage Ceph
• openEuler update for glibc
• Multiple vulnerabilities in Service Telemetry Framework 1.5
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM Sterling Order Management
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Multiple vulnerabilities in Dell ObjectScale
• IBM Integrated Analytics System update for glibc
• Multiple vulnerabilities in IBM Security Verify Governance - Identity Manager
• Multiple vulnerabilities in IBM Robotic Process Automation
• Multiple vulnerabilities in IBM Watson Studio on Cloud Pak for Data - Execution Engine for Apache Hadoop
• Amazon Linux AMI update for glibc
• Anolis OS update for glibc
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Multiple vulnerabilities in IBM webMethods Managed File Transfer