Bug 2449783 (CVE-2026-4438)
| Summary: | CVE-2026-4438 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | low | Docs Contact: | |
| Priority: | low | ||
| Version: | unspecified | CC: | ashankar, codonell, dj, fweimer, pfrankli, rhel-process-autobot, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in the GNU C library (glibc). When applications use the `gethostbyaddr` or `gethostbyaddr_r` functions with a `nsswitch.conf` configuration that specifies glibc's DNS backend, the library may return an invalid DNS hostname. This violates the DNS specification and could lead to applications receiving incorrect hostname information, potentially impacting network operations or security decisions.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2450226, 2450227, 2450229, 2450231, 2450233, 2450235 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-03-20 21:02:39 UTC
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:19061 https://access.redhat.com/errata/RHSA-2026:19061 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:20597 https://access.redhat.com/errata/RHSA-2026:20597 |